mirror of
https://github.com/ivuorinen/dotfiles.git
synced 2026-02-07 20:50:44 +00:00
Ismo Vuorinen
6d72003446
* fix(ci): replace broad permissions with specific scopes in workflows
Replace read-all/write-all with minimum required permission scopes
across all GitHub Actions workflows to follow the principle of least
privilege (SonarCloud rule githubactions:S8234).
* fix(shell): use [[ instead of [ for conditional tests
Replace single brackets with double brackets in bash conditional
expressions across 14 files (28 changes). All scripts use bash
shebangs so [[ is safe everywhere (SonarCloud rule shelldre:S7688).
* fix(shell): add explicit return statements to functions
Add return 0 as the last statement in ~46 shell functions across
17 files that previously relied on implicit return codes
(SonarCloud rule shelldre:S7682).
* fix(shell): assign positional parameters to local variables
Replace direct $1/$2/$3 usage with named local variables in _log(),
msg(), msg_err(), msg_done(), msg_run(), msg_ok(), and array_diff()
(SonarCloud rule shelldre:S7679).
* fix(python): replace dict() constructor with literal
Use {} instead of dict() for empty dictionary initialization
(SonarCloud rule python:S7498).
* fix(shell): fix husky shebang and tolerate npm outdated exit code
* docs(shell): add function docstring comments
* fix(shell): fix heredoc indentation in x-sonarcloud
* feat(python): add ruff linter and formatter configuration
* fix(ci): align megalinter config with biome, ruff, and shfmt settings
* fix(ci): disable black and yaml-prettier in megalinter config
* chore(ci): update ruff-pre-commit to v0.15.0 and fix hook name
* fix(scripts): check for .git dir before skipping clone in install-fonts
* fix(shell): address code review issues in scripts and shared.sh
- Guard wezterm show-keys failure in create-wezterm-keymaps.sh
- Stop masking git failures with return 0 in install-cheat-purebashbible.sh
- Add missing shared.sh source in install-xcode-cli-tools.sh
- Replace exit 1 with return 1 in sourced shared.sh
* fix(scripts): address code review and security findings
- Guard wezterm show-keys failure in create-wezterm-keymaps.sh
- Stop masking git failures with return 0 in install-cheat-purebashbible.sh
- Add missing shared.sh source in install-xcode-cli-tools.sh
- Replace exit 1 with return 1 in sourced shared.sh
- Remove shell=True subprocess calls in x-git-largest-files.py
* style(shell): apply shfmt formatting and add args to pre-commit hook
* fix(python): suppress bandit false positives in x-git-largest-files
* fix(python): add nosemgrep suppression for check_output call
* feat(format): add prettier for YAML formatting
Install prettier, add .prettierrc.json config (200-char width, 2-space
indent, LF endings), .prettierignore, yarn scripts (lint:prettier,
fix:prettier, format:yaml), and pre-commit hook scoped to YAML files.
* style(yaml): apply prettier formatting
* fix(scripts): address remaining code review findings
- Python: use list comprehension to filter empty strings instead of
slicing off the last element
- create-wezterm-keymaps: write to temp file and mv for atomic updates
- install-xcode-cli-tools: fix shellcheck source directive path
* fix(python): sort imports alphabetically in x-git-largest-files
* fix(lint): disable PYTHON_ISORT in MegaLinter, ruff handles it
* chore(git): add __pycache__ to gitignore
* fix(python): rename ambiguous variable l to line (E741)
* style: remove trailing whitespace and blank lines
* style(fzf): apply shfmt formatting
* style(shell): apply shfmt formatting
* docs(plans): add design documents
* style(docs): add language specifier to fenced code block
* feat(lint): add markdown-table-formatter to dev tooling
Add markdown-table-formatter as a dev dependency with yarn scripts
(lint:md-table, fix:md-table) and a local pre-commit hook to
automatically format markdown tables on commit.
112 lines
3.7 KiB
Bash
Executable File
112 lines
3.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
git submodule sync --recursive
|
|
|
|
# dotbot and plugins
|
|
git submodule add --name dotbot \
|
|
-f https://github.com/anishathalye/dotbot.git tools/dotbot
|
|
git submodule add --name dotbot-include \
|
|
-f https://gitlab.com/gnfzdz/dotbot-include.git tools/dotbot-include
|
|
|
|
# other repos
|
|
git submodule add --name cheat-community \
|
|
-f https://github.com/cheat/cheatsheets.git config/cheat/cheatsheets/community
|
|
git submodule add --name cheat-tldr \
|
|
-f https://github.com/ivuorinen/cheatsheet-tldr.git config/cheat/cheatsheets/tldr
|
|
git submodule add --name antidote \
|
|
--depth 1 \
|
|
-f https://github.com/mattmc3/antidote.git tools/antidote
|
|
|
|
# tmux plugin manager and plugins
|
|
git submodule add --name tmux/tmux-continuum \
|
|
-f https://github.com/tmux-plugins/tmux-continuum config/tmux/plugins/tmux-continuum
|
|
git submodule add --name tmux/tmux-resurrect \
|
|
-f https://github.com/tmux-plugins/tmux-resurrect.git config/tmux/plugins/tmux-resurrect
|
|
git submodule add --name tmux/tmux-sessionist \
|
|
-f https://github.com/tmux-plugins/tmux-sessionist.git config/tmux/plugins/tmux-sessionist
|
|
git submodule add --name tmux/tmux-suspend \
|
|
-f https://github.com/MunifTanjim/tmux-suspend.git config/tmux/plugins/tmux-suspend
|
|
git submodule add --name tmux/tmux-current-pane-hostname \
|
|
-f https://github.com/soyuka/tmux-current-pane-hostname.git config/tmux/plugins/tmux-current-pane-hostname
|
|
git submodule add --name tmux/tmux-dark-notify \
|
|
-f https://github.com/ivuorinen/tmux-dark-notify.git config/tmux/plugins/tmux-dark-notify
|
|
git submodule add --name tmux/catppuccin \
|
|
-f https://github.com/catppuccin/tmux.git config/tmux/plugins/catppuccin
|
|
|
|
# Takes submodules and sets them to ignore all changes
|
|
for MODULE in $(git config --file .gitmodules --get-regexp path | awk '{ print $2 }'); do
|
|
echo "Ignoring submodule changes for submodule.${MODULE}..."
|
|
git config "submodule.${MODULE}.ignore" "dirty"
|
|
done
|
|
|
|
# Mark certain repositories shallow
|
|
git config -f .gitmodules submodule.antidote.shallow true
|
|
|
|
# Log a message using msgr if available, else echo
|
|
_log()
|
|
{
|
|
local msg="$1"
|
|
if command -v msgr > /dev/null 2>&1; then
|
|
msgr run_done "$msg"
|
|
else
|
|
echo " [ok] $msg"
|
|
fi
|
|
return 0
|
|
}
|
|
|
|
# Remove a stale git submodule and clean up references
|
|
remove_old_submodule()
|
|
{
|
|
local name="$1" path="$2"
|
|
|
|
# Remove working tree
|
|
if [[ -d "$path" ]]; then
|
|
rm -rf "$path"
|
|
_log "Removed $path"
|
|
fi
|
|
|
|
# Remove stale git index entry
|
|
git rm --cached "$path" 2> /dev/null || true
|
|
|
|
# Remove .git/config section keyed by path
|
|
git config --remove-section "submodule.$path" 2> /dev/null || true
|
|
|
|
# Skip name-based cleanup if no submodule name provided
|
|
[[ -z "$name" ]] && return 0
|
|
|
|
# Remove .git/config section keyed by name
|
|
git config --remove-section "submodule.$name" 2> /dev/null || true
|
|
|
|
# Remove .git/modules/<name>/ cached repository
|
|
if [[ -d ".git/modules/$name" ]]; then
|
|
rm -rf ".git/modules/$name"
|
|
_log "Removed .git/modules/$name"
|
|
fi
|
|
}
|
|
|
|
# remove old submodules (name:path pairs)
|
|
old_submodules=(
|
|
"tmux/tpm:config/tmux/plugins/tpm"
|
|
":config/tmux/plugins/tmux"
|
|
"tmux/tmux-menus:config/tmux/plugins/tmux-menus"
|
|
"dotbot-crontab:tools/dotbot-crontab"
|
|
"dotbot-snap:tools/dotbot-snap"
|
|
"tmux/tmux-window-name:config/tmux/plugins/tmux-window-name"
|
|
"tmux/tmux-sensible:config/tmux/plugins/tmux-sensible"
|
|
"tmux/tmux-mode-indicator:config/tmux/plugins/tmux-mode-indicator"
|
|
"tmux/tmux-yank:config/tmux/plugins/tmux-yank"
|
|
":config/tmux/plugins/tmux-fzf-url"
|
|
"nvim-kickstart:config/nvim-kickstart"
|
|
"asdf:local/bin/asdf"
|
|
"asdf:local/asdf"
|
|
"dotbot-asdf:tools/dotbot-asdf"
|
|
"dotbot-pip:tools/dotbot-pip"
|
|
"dotbot-brew:tools/dotbot-brew"
|
|
)
|
|
|
|
for entry in "${old_submodules[@]}"; do
|
|
name="${entry%%:*}"
|
|
path="${entry#*:}"
|
|
remove_old_submodule "$name" "$path"
|
|
done
|