repomatic 7.16.1__tar.gz → 7.16.2__tar.gz

{repomatic-7.16.1 → repomatic-7.16.2}/.claude/.claude-plugin/plugin.json

@@ -20,5 +20,5 @@
 	"license": "GPL-2.0-or-later",
 	"name": "repomatic",
 	"repository": "https://github.com/kdeldycke/repomatic",
-	"version": "7.16.1"
+	"version": "7.16.2"
 }

{repomatic-7.16.1/repomatic/data → repomatic-7.16.2/.claude}/skills/babysit-ci/SKILL.md

@@ -102,7 +102,7 @@ After fixing (step 5-7), the loop restarts from the top: push, run all three cha
 
    It reads every workflow a push can start (derived from `.github/workflows/`, so its list is wider than the five above), reports each one's latest run, and names the failing jobs that actually gate a merge. Three traps it settles, so no hand-rolled `jq` has to: a run's own `status` lags its jobs (every monitored workflow can read `queued` while a dozen jobs have already finished, which is indistinguishable from the runner-cap saturation a busy account genuinely hits); a `continue-on-error` probe that crashed hides inside a `success` run conclusion; and a run whose `conclusion` is `failure` with *no* failed job is a workflow-level error (an invalid `strategy.matrix` expression, malformed YAML, a missing secret) with no job log to read, which the command flags rather than letting you write off a persistently-red workflow as a known artifact.
 
-   The one thing run state *does* gate is log retrieval (step 4): job logs stay unreadable until the parent run itself reaches a terminal state.
+   Run state *does* gate the run-scoped log read (step 4): `gh run view --log-failed` refuses to answer until the parent run reaches a terminal state. A completed job's own log is readable at once.
 
    **A queue is not a hang, and elapsed time alone cannot tell them apart.** A long stall invites the theory that some run is stuck and that cancelling it would free the pool, which is a conclusion worth reaching only on evidence, because acting on it destroys work that was progressing fine. Two readings settle it, and neither is the elapsed clock. Get a **baseline** from that workflow's recent successful runs (`gh run list --workflow <wf> --repo <owner/repo> --status success --json createdAt,updatedAt`): a suite whose normal duration is two hours is not hung at ninety minutes. Then read **per-job `completedAt` timestamps** (`gh run view <id> --json jobs`) rather than an aggregate: a flat count of `in_progress` jobs is not evidence of a stall, since jobs finish and others start into the freed slots, holding the count steady while real progress continues. Watch for the self-contradiction that exposes the mistake, a report that the count "dropped from 11 to 9" *and* that nothing has changed. Two smaller traps live here too: `gh` reports a pending job's `conclusion` as `""`, not `null`, so a `select(.conclusion == null)` filter silently matches nothing and reads as "no pending jobs"; and jobs queue against the runner pool their `runs-on` names, so a stall confined to macOS cells says nothing about Linux capacity. **Never cancel another repository's run to free slots without the maintainer's explicit go-ahead**, and never ask for that go-ahead on a diagnosis you have not backed with a baseline and timestamps.
 
@@ -134,7 +134,7 @@ After fixing (step 5-7), the loop restarts from the top: push, run all three cha
 
    The first filter negates the unstable glyph rather than matching a `✅` prefix, mirroring `JobStatus.required`. `tests.yaml` runs four required jobs whose names carry no `✅` at all (`🧬 Project metadata`, `1️⃣ Run-once tests`, `📦 Package install`, `🖥️ Validate …`), and the release engine prefixes the workflow ahead of the glyph, so a prefix test silently drops a real failure from the batch.
 
-   Fetch each failed job's log (`gh api repos/<OWNER>/<REPO>/actions/jobs/<JOB_ID>/logs`) and fix them as one batch: different sources surface different issues, and logs survive cancellation. Batch only what has *already failed*, never what might still fail. Once every harvested failure is root-caused and fixed, push immediately rather than waiting for undrained cells to surface more: the fresh run supersedes the stale one, and serially waiting out each full matrix is the slow path. Analyze following the [error triage discipline](#error-triage-discipline): stable-job `FAILED`/`AssertionError` lines only.
+   Fetch each failed job's log (`gh api repos/<OWNER>/<REPO>/actions/jobs/<JOB_ID>/logs --allow-escape-sequences`) and fix them as one batch: different sources surface different issues, and logs survive cancellation. Batch only what has *already failed*, never what might still fail. Once every harvested failure is root-caused and fixed, push immediately rather than waiting for undrained cells to surface more: the fresh run supersedes the stale one, and serially waiting out each full matrix is the slow path. Analyze following the [error triage discipline](#error-triage-discipline): stable-job `FAILED`/`AssertionError` lines only.
 
    `gh run view --log-failed` writes its log cache under `~/.cache/gh`, which the harness sandbox denies: the resulting `failed to get run log: creating cache entry ... operation not permitted` masquerades as a `gh` bug. Disable the sandbox for that read, exactly like the signing calls in step 7.
 
@@ -275,6 +275,7 @@ When a test passes locally but fails in CI, check platform differences before ch
 Not all CI failures are code bugs:
 
 - **Runner timeouts or OOM kills**: the log ends abruptly or shows `The runner has received a shutdown signal`. Re-run; do not change code.
+- **A runner that died mid-step**: the step runs far past its baseline, and a cancel does not stop it. A live runner kills a cancelled step within ten seconds and keeps its partial log. A cancel does not apply to a job whose `if:` holds `always()`, so read that condition first. Any other job still `in_progress` a minute after the cancel has lost its runner: the server closes it at the five-minute [cancellation timeout](https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-cancellation), and no log survives, neither at the job's log endpoint (`BlobNotFound`) nor in the run's log archive. A 404 from a job that is still running proves nothing, since every running job returns one. Re-run with `--failed`: there is nothing to diagnose.
 - **Action version mismatches**: `Unable to resolve action`, deprecated-runtime errors. Fix the workflow YAML, not the Python.
 - **Network/registry flakiness**: `uv`/`pip` timeouts, PyPI 503s, `ConnectionResetError`. Re-run.
 - **A wall-clock budget assertion** (`assert elapsed_ms < N`) failing on a shared runner: infrastructure is the *trigger*, but the defect is the test, which took one sample and so measured that runner's worst moment rather than the code. A re-run only re-rolls the dice, and the tell that it has been re-rolled before is a budget already ratcheted upward in an earlier cycle for the same runner class. Assert on the fastest of several samples instead: a real regression slows every sample, a scheduling stall slows one. Raising the budget again is the fix that stops working.

{repomatic-7.16.1 → repomatic-7.16.2}/.claude-plugin/marketplace.json

@@ -14,7 +14,7 @@
 			"name": "repomatic",
 			"source": {
 				"path": ".claude",
-				"ref": "v7.16.1",
+				"ref": "v7.16.2",
 				"source": "git-subdir",
 				"url": "https://github.com/kdeldycke/repomatic"
 			},
@@ -25,7 +25,7 @@
 				"github-actions",
 				"release-automation"
 			],
-			"version": "7.16.1"
+			"version": "7.16.2"
 		}
 	]
 }

{repomatic-7.16.1 → repomatic-7.16.2}/.github/workflows/_release-build.yaml

@@ -81,7 +81,7 @@ jobs:
         env:
           PR_REF: ${{ steps.extract.outputs.pr_ref }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-body --output-format github-actions
           --template detect-squash-merge
           --pr-ref "${PR_REF}"
@@ -130,7 +130,7 @@ jobs:
       - name: Run repomatic show-metadata
         id: metadata
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' show-metadata
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' show-metadata
           --format github-json --output "$GITHUB_OUTPUT"
           new_commits_matrix release_commits_matrix build_targets nuitka_matrix
           is_python_project cli_scripts package_name current_version released_version
@@ -166,7 +166,7 @@ jobs:
           version: "0.12.12"
       - name: Check dependency sources
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' lint-deps
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' lint-deps
           ${{ fromJSON(needs.metadata.outputs.metadata).release_commits_matrix
           && '--fatal' || '--no-fatal' }}
 

{repomatic-7.16.1 → repomatic-7.16.2}/.github/workflows/_release-engine.yaml

@@ -66,7 +66,7 @@ jobs:
       - name: Run repomatic show-metadata
         id: metadata
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' show-metadata
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' show-metadata
           --format github-json --output "$GITHUB_OUTPUT"
           new_commits_matrix release_commits_matrix build_targets nuitka_matrix
           nuitka_extras is_python_project package_name current_version
@@ -286,7 +286,7 @@ jobs:
           # NUITKA_PYTHON_FLAGS and NUITKA_CCACHE_FLAG hold optional flags,
           # meant to word-split.
           # shellcheck disable=SC2086
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' run nuitka -- \
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' run nuitka -- \
             ${NUITKA_PYTHON_FLAGS} ${NUITKA_CCACHE_FLAG} \
             --output-filename="${BIN_NAME}" "${MODULE_PATH}"
       - name: Upload Nuitka crash report
@@ -316,7 +316,7 @@ jobs:
           BIN_NAME: ${{ matrix.bin_name }}
         shell: bash
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           verify-binary --target "${TARGET}" --binary "${BIN_NAME}"
       # On a non-release run, exercise the freshly-built binary in place: the
       # standalone test-binaries job only runs for release commits, so canary
@@ -368,7 +368,7 @@ jobs:
           BIN_NAME: ${{ matrix.bin_name }}
         shell: bash
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' run gh --
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' run gh --
           attestation verify "${BIN_NAME}"
           --repo "${{ github.repository }}"
           --signer-repo kdeldycke/repomatic
@@ -384,7 +384,7 @@ jobs:
           BUNDLE_PATH: ${{ steps.attest-binary.outputs.bundle-path }}
         shell: bash
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pack-attestation --bundle "${BUNDLE_PATH}"
       - name: Upload attestation bundle
         # Globbed rather than named, so the filename stays the CLI's to decide.
@@ -507,7 +507,7 @@ jobs:
           CURRENT_VERSION: ${{ matrix.current_version }}
           COMMIT: ${{ matrix.commit }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' git-tag
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' git-tag
           --tag "v${CURRENT_VERSION}"
           --commit "${COMMIT}"
           --skip-existing
@@ -550,7 +550,7 @@ jobs:
         continue-on-error: true
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' sync-dev-release --live --delete
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' sync-dev-release --live --delete
       - name: Create GitHub release draft
         # Idempotent: skips if release already exists (e.g. workflow re-run).
         # Notes carry the PyPI availability admonition from the start: baking it
@@ -664,7 +664,7 @@ jobs:
           BUNDLE_PATH: ${{ steps.attest-manpages.outputs.bundle-path }}
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: |
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' \
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' \
             pack-attestation --bundle "${BUNDLE_PATH}" > upload-list.txt
           xargs gh release upload "v${CURRENT_VERSION}" \
             --repo "${{ github.repository }}" \
@@ -750,7 +750,7 @@ jobs:
           PACKAGE_NAME: ${{ fromJSON(needs.metadata.outputs.metadata).package_name }}
         shell: bash
         run: |
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' pack-attestation \
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' pack-attestation \
             --bundle "${BUNDLE_PATH}" \
             --dir release-assets \
             --name "${PACKAGE_NAME}-extra-assets" > upload-list.txt
@@ -829,7 +829,7 @@ jobs:
         # Python distributions live in the CLI; the shell only feeds the
         # printed list to `gh release upload`.
         run: |
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' pack-binaries \
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' pack-binaries \
             --version "${CURRENT_VERSION}" --dir ./compile-assets > upload-list.txt
           if [[ -s upload-list.txt ]]; then
             xargs gh release upload "v${CURRENT_VERSION}" \
@@ -901,7 +901,7 @@ jobs:
           VIRUSTOTAL_API_KEY: ${{ secrets.VIRUSTOTAL_API_KEY }}
           CURRENT_VERSION: ${{ matrix.current_version }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' scan-virustotal
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' scan-virustotal
           --tag "v${CURRENT_VERSION}"
           --binaries-dir ./binaries
           --poll
@@ -915,7 +915,7 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' sync-binaries
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' sync-binaries
           --repo "${{ github.repository }}"
           --page docs/binaries.md
           --records docs/assets/virustotal-scans.csv
@@ -929,7 +929,7 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template scan-virustotal
           --add-path docs/binaries.md
           --add-path docs/assets/binaries.csv
@@ -977,7 +977,7 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' sync-dev-release --live
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' sync-dev-release --live
           --upload-assets release_assets
 
   # Refresh the Mermaid dependency graph once per release (never on ordinary
@@ -1004,10 +1004,10 @@ jobs:
           version: "0.12.12"
       - name: Generate graph
         # Package name and output path are auto-detected from pyproject.toml.
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' update-dep-graph
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' update-dep-graph
       - name: Sync pull request
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template update-dep-graph

{repomatic-7.16.1/repomatic/data → repomatic-7.16.2/.github/workflows}/autofix.yaml

@@ -71,7 +71,7 @@ jobs:
           HAS_CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN && 'true' || '' }}
           HAS_REPOMATIC_NOTIFICATIONS_PAT: ${{ secrets.REPOMATIC_NOTIFICATIONS_PAT && 'true' || '' }}
           HAS_VIRUSTOTAL_API_KEY: ${{ secrets.VIRUSTOTAL_API_KEY && 'true' || '' }}
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' setup-guide
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' setup-guide
 
   sync-runner-images:
     name: 🖥️ Sync runner images
@@ -98,14 +98,14 @@ jobs:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
           PROPOSAL: ${{ runner.temp }}/runner-images-proposal.md
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           sync-runner-images --output "$PROPOSAL"
       - name: Sync pull request
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
           PROPOSAL: ${{ runner.temp }}/runner-images-proposal.md
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template sync-runner-images
           --template-arg-file proposal="$PROPOSAL"
 
@@ -137,7 +137,7 @@ jobs:
       - name: Run repomatic show-metadata
         id: metadata
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' show-metadata
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' show-metadata
           --format github-json --output "$GITHUB_OUTPUT"
           gitignore_exists python_files pyproject_files json_files doc_files
           markdown_files is_python_project is_python_package mailmap_exists
@@ -169,7 +169,7 @@ jobs:
         # An explicit file list is required, as autopep8 cannot find files in the
         # ".github" subdirectory on its own: the tool runner resolves it. See
         # `ToolSpec.default_paths` in repomatic/tooling/tool_registry.py.
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' run autopep8
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' run autopep8
       # XXX Ruff is planning to support linting and formatting in one unified command at one point.
       #     See: https://github.com/astral-sh/ruff/issues/8232
       - name: Run Ruff
@@ -179,15 +179,15 @@ jobs:
         # Linting gates in the lint workflow; here `check` only applies its safe fixes,
         # and the GitHub annotation still surfaces whatever it could not fix.
         run: |
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' run ruff -- \
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' run ruff -- \
             check --output-format github --exit-zero
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' run ruff -- \
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' run ruff -- \
             format --output-format github
       - name: Sync pull request
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template format-python
   format-pyproject:
     name: 📐 Format pyproject.toml
@@ -214,13 +214,13 @@ jobs:
         # See `ToolSpec.default_paths` in repomatic/tooling/tool_registry.py.
         run: |
           rc=0
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' run pyproject-fmt || rc=$?
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' run pyproject-fmt || rc=$?
           [ "$rc" -eq 0 ] || [ "$rc" -eq 1 ] || exit "$rc"
       - name: Sync pull request
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template format-pyproject
   format-markdown:
     name: ✍️ Format Markdown
@@ -259,18 +259,18 @@ jobs:
         # No file list: the tool runner resolves mdformat's targets and runs it
         # once per file, the way `xargs -n1` used to here. See
         # `ToolSpec.default_paths` in repomatic/tooling/tool_registry.py.
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' run mdformat
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' run mdformat
       # Runs inside this job, not its own: it corrects what mdformat just wrote,
       # so a separate job would fight this one across two PRs. See
       # repomatic/awesome_toc.py for rationale.
       - name: Markdown fixes for Awesome Lists
         if: startsWith(github.event.repository.name, 'awesome-')
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' fix-awesome-toc
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' fix-awesome-toc
       - name: Sync pull request
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template format-markdown
   format-shell:
     name: 🐚 Format Shell
@@ -300,12 +300,12 @@ jobs:
         # tool outright when there are none. A pathless shfmt reads stdin, and
         # an empty `xargs` list used to hand it exactly that. See
         # `ToolSpec.default_paths` in repomatic/tooling/tool_registry.py.
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' run shfmt
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' run shfmt
       - name: Sync pull request
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template format-shell
   format-json:
     name: 🔧 Format JSON
@@ -334,12 +334,12 @@ jobs:
         # No arguments: the tool runner supplies biome's subcommand, its JSONC
         # parse flags and the file list. See `ToolSpec.default_args` in
         # repomatic/tooling/tool_registry.py.
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' run biome
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' run biome
       - name: Sync pull request
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template format-json
   # --- Fixers: correct or improve existing content in-place. ---
 
@@ -373,13 +373,13 @@ jobs:
           restore-keys: |
             repomatic-${{ runner.os }}-${{ runner.arch }}-typos-
       - name: Fix typos
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' run typos
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' run typos
       - name: Sync pull request
         env:
           # We need custom PAT with workflows permissions to fix typos in .github/workflows/*.yaml` files.
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template fix-typos
   fix-vulnerable-deps:
     name: 🛡️ Fix vulnerable deps
@@ -406,7 +406,7 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' audit --fix
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' audit --fix
           --repo "${{ github.repository }}"
           --output "$GITHUB_OUTPUT" --output-format github-actions
       - name: Sync pull request
@@ -414,7 +414,7 @@ jobs:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
           REPOMATIC_DIFF_TABLE_FILE: ${{ steps.fix.outputs.diff_table_file }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template fix-vulnerable-deps
   sync-repomatic:
     name: 🔄 Sync repomatic
@@ -445,7 +445,7 @@ jobs:
           # The upgrade report reads release notes from the GitHub API.
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' init --upgrade
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' init --upgrade
           --delete-unmodified --delete-excluded
           --output "$GITHUB_OUTPUT" --output-format github-actions
       - name: Sync pull request
@@ -454,7 +454,7 @@ jobs:
           # We need custom PAT with workflows permissions to update .github/workflows/*.yaml files.
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template sync-repomatic
       - name: Sync upgrade pull request
         if: steps.sync.outputs.upgrade_version != ''
@@ -464,7 +464,7 @@ jobs:
           REPOMATIC_UPGRADE_REPORT_FILE: ${{ steps.sync.outputs.upgrade_report_file }}
           REPOMATIC_UPGRADE_VERSION: ${{ steps.sync.outputs.upgrade_version }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template sync-repomatic-upgrade --branch sync-repomatic
   format-images:
     name: 🖼️ Format images
@@ -504,14 +504,14 @@ jobs:
         env:
           SUMMARY: ${{ runner.temp }}/format-images-summary.md
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' format-images
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' format-images
           --output "$SUMMARY"
       - name: Sync pull request
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
           SUMMARY: ${{ runner.temp }}/format-images-summary.md
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template format-images
           --template-arg-file summary="$SUMMARY"
   # --- Syncers: regenerate files from external sources or project state. ---
@@ -532,12 +532,12 @@ jobs:
         with:
           version: "0.12.12"
       - name: Sync .gitignore
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' sync-gitignore
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' sync-gitignore
       - name: Sync pull request
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template sync-gitignore
   sync-bumpversion:
     name: 🔄 Sync bumpversion config
@@ -557,12 +557,12 @@ jobs:
         with:
           version: "0.12.12"
       - name: Sync bumpversion config
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' sync-bumpversion
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' sync-bumpversion
       - name: Sync pull request
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template sync-bumpversion
   sync-mailmap:
     name: 📬 Sync .mailmap
@@ -583,12 +583,12 @@ jobs:
         with:
           version: "0.12.12"
       - name: Sync .mailmap
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' sync-mailmap --skip-if-missing
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' sync-mailmap --skip-if-missing
       - name: Sync pull request
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template sync-mailmap
   sync-deps:
     name: 🔗 Sync dependencies
@@ -664,7 +664,7 @@ jobs:
           && fromJSON(needs.metadata.outputs.metadata).is_python_project
         name: Sync dependency sources
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' sync-dep-sources
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' sync-dep-sources
           --no-table --release-notes
           --output "$GITHUB_OUTPUT" --output-format github-actions
       - if: >
@@ -675,7 +675,7 @@ jobs:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
           REPOMATIC_DIFF_TABLE_FILE: ${{ steps.sync-dep-sources.outputs.diff_table_file }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template sync-dep-sources
       # --- sync-uv-lock: re-lock dependencies (Python projects). ---
       - if: >
@@ -689,7 +689,7 @@ jobs:
           && fromJSON(needs.metadata.outputs.metadata).is_python_project
         name: Sync uv.lock
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' sync-uv-lock
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' sync-uv-lock
           --no-table --release-notes
           --output "$GITHUB_OUTPUT" --output-format github-actions
       - if: ${{ !cancelled() && steps.sync-uv-lock.outcome == 'success' }}
@@ -698,7 +698,7 @@ jobs:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
           REPOMATIC_DIFF_TABLE_FILE: ${{ steps.sync-uv-lock.outputs.diff_table_file }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template sync-uv-lock
       # --- sync-action-pins: bump SHA-pinned actions (repos with workflows). ---
       - if: >
@@ -716,7 +716,7 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' sync-action-pins --release-notes
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' sync-action-pins --release-notes
           --output "$GITHUB_OUTPUT" --output-format github-actions
       - if: >
           !cancelled()
@@ -726,7 +726,7 @@ jobs:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
           REPOMATIC_DIFF_TABLE_FILE: ${{ steps.sync-action-pins.outputs.diff_table_file }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template sync-action-pins
       # --- sync-workflow-pins: bump npm/PyPI literals (repos with workflows). ---
       - if: >
@@ -742,7 +742,7 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' sync-workflow-pins --release-notes
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' sync-workflow-pins --release-notes
           --output "$GITHUB_OUTPUT" --output-format github-actions
       - if: >
           !cancelled()
@@ -752,7 +752,7 @@ jobs:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
           REPOMATIC_DIFF_TABLE_FILE: ${{ steps.sync-workflow-pins.outputs.diff_table_file }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template sync-workflow-pins
       # sync-tool-versions is deliberately absent: it rewrites repomatic's own
       # tool registry, so it lives in the upstream-only self-maintenance.yaml.
@@ -779,7 +779,7 @@ jobs:
       - name: Update docs
         # Runs sphinx-apidoc, converts RST stubs to MyST if applicable, runs docs/docs_update.py, then
         # refreshes self-updating directive blocks with click-extra refresh-directives.
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' update-docs
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' update-docs
       - name: Format regenerated pyproject.toml
         # The project's docs.update-script may regenerate pyproject.toml sections (label rules,
         # keywords). Reformat them only when update-docs actually changed pyproject.toml, so this
@@ -796,11 +796,11 @@ jobs:
             exit 0
           fi
           rc=0
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' run pyproject-fmt || rc=$?
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' run pyproject-fmt || rc=$?
           [ "$rc" -eq 0 ] || [ "$rc" -eq 1 ] || exit "$rc"
       - name: Sync pull request
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1'
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2'
           pr-sync --template update-docs

{repomatic-7.16.1/repomatic/data → repomatic-7.16.2/.github/workflows}/autolock.yaml

@@ -44,4 +44,4 @@ jobs:
         # behind each, and why the exclusion exists at all.
         env:
           GH_TOKEN: ${{ github.token }}
-        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' lock-threads --live
+        run: uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' lock-threads --live

{repomatic-7.16.1/repomatic/data → repomatic-7.16.2/.github/workflows}/cancel-runs.yaml

@@ -59,6 +59,6 @@ jobs:
           PR_BRANCH: ${{ github.event.pull_request.head.ref }}
         # See repomatic/github/actions.py for the cancellation logic.
         run: >
-          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.1' cancel-runs
+          uvx --no-progress --exclude-newer-package repomatic=P0D 'repomatic==7.16.2' cancel-runs
           --branch "$PR_BRANCH"
           --current-run-id '${{ github.run_id }}'