lucaslarson / dotfiles

This is where the ♥️ is                                   at.

dotfiles's Issues

don’t compare C to C++ to Clang

e82bc58988/CodeSnippets.md § c

consider 𝑥 >/dev/null 2>&1 instead of printf 𝑥

more specifically:
using

PS4_temporary=${PS4}
PS4=''
set -x; ! || done! >/dev/null 2>&1;set +x
PS4=${PS4_temporary}
unset PS4_temporary

dotfiles/setup/linux/alpine/init.sh

Lines 15 to 208 in 7ed596e

	# apk
	command -v apk >/dev/null 2>&1 || (
	# https://github.com/ish-app/ish/wiki/Installing-apk-on-the-App-Store-Version/89019508ddd504e6f08af30d8c8da2d3a8691b76#wiki-body
	wget --output-document - http://web.archive.org/web/20201127185919id_/dl-cdn.alpinelinux.org/alpine/v3.12/main/x86/apk-tools-static-2.10.5-r1.apk | tar -xz apk.static
	./apk.static add apk-tools
	)
	# configure repositories
	printf 'http://dl-cdn.alpinelinux.org/alpine/latest-stable/main\n' >/etc/apk/repositories
	printf 'http://dl-cdn.alpinelinux.org/alpine/latest-stable/community\n' >>/etc/apk/repositories
	# update
	printf '\nupdating Alpine Linux repositories...\n'
	apk update --verbose --progress
	apk upgrade --verbose --progress
	# https://wiki.alpinelinux.org/w/index.php?oldid=17773&title=How_to_get_regular_stuff_working#Man_pages
	# man-pages adds `man0`, `man2`, man4`, `man6` to `/usr/share/man/`
	{ [ -d /usr/share/man/man0 ] &&
	[ -d /usr/share/man/man2 ] &&
	[ -d /usr/share/man/man4 ] &&
	[ -d /usr/share/man/man6 ]; } || (
	printf '\ninstalling man pages...\n'
	apk add man-pages
	)
	command -v mandoc >/dev/null 2>&1 || (
	printf '\ninstalling mandoc for man pages...\n'
	apk add mandoc mandoc-doc
	)
	command -v less >/dev/null 2>&1 || (
	printf '\ninstalling less to read man pages...\n'
	apk add less less-doc
	)
	# https://wiki.alpinelinux.org/w/index.php?oldid=17773&title=How_to_get_regular_stuff_working#Shell_.40_commandline
	# https://web.archive.org/web/20210218201739id_/web.archive.org/screenshot/docs.google.com/document/d/10-8wjANQGbG43XZ0wN57M1RYOLUwu9RZATNe9vJQYKw/mobilebasic
	# https://wiki.alpinelinux.org/w/index.php?oldid=18038&title=Alpine_newbie_apk_packages#coreutils_libc_and_utmps_in_alpine
	apk add coreutils coreutils-doc
	{ [ -x /usr/bin/coreutils ] &&
	[ findutils = "$($(command -v find) -version|head -n1|awk '{print $3}'|tr -d '()')" ]; } || (
	printf '\ninstalling Linux utilities...\n'
	)
	apk add util-linux util-linux-doc pciutils pciutils-doc usbutils usbutils-doc coreutils coreutils-doc binutils binutils-doc findutils findutils-doc grep grep-doc wget wget-doc curl curl-doc openssl openssl-doc sudo sudo-doc sed sed-doc attr attr-doc dialog dialog-doc bash bash-doc bash-completion bash-completion-doc readline readline-doc
	{
	printf 'http://dl-cdn.alpinelinux.org/alpine/edge/main\n';
	printf 'http://dl-cdn.alpinelinux.org/alpine/edge/community\n';
	printf 'http://dl-cdn.alpinelinux.org/alpine/edge/testing\n';
	} >>/etc/apk/repositories
	apk update
	# ssh
	# https://wiki.alpinelinux.org/w/index.php?oldid=13842&title=Setting_up_a_ssh-server#OpenSSH
	[ -d /etc/ssh ] || (
	printf '\ninstalling OpenSSH...\n'
	apk add openssh openssh-doc
	)
	# https://wiki.alpinelinux.org/w/index.php?oldid=17295&title=Setting_up_a_laptop#Creating_GPG_keys
	[ -x /usr/bin/gpg2 ] || (
	apk add gnupg gnupg-doc
	)
	# git
	command -v git >/dev/null 2>&1 || (
	printf '\ninstalling Git...\n'
	apk add git git-doc
	)
	# git add --patch
	[ -x /usr/libexec/git-core/git-add--interactive ] || (
	# https://stackoverflow.com/a/57632778
	apk add git-perl
	)
	# time zone
	printf '\nupdating time zone information...\n'
	apk add --no-cache tzdata tzdata-doc
	cp /usr/share/zoneinfo/America/New_York /etc/localtime
	printf 'America/New_York\n' >/etc/timezone
	# python
	printf '\nchecking Python installation...\n'
	command -v python >/dev/null 2>&1 || (
	printf '\ninstalling Python 2 and Python 3...\n'
	apk add python2 python2-doc python3 python3-doc
	)
	# pip
	command -v pip >/dev/null 2>&1 || (
	printf '\ninstalling pip...\n' && sleep 3
	printf 'this may take a while...\n'
	curl http://web.archive.org/web/20201031072740id_/bootstrap.pypa.io/get-pip.py -o get-pip.py
	python3 get-pip.py
	)
	# mackup
	command -v mackup >/dev/null 2>&1 || (
	printf '\ninstalling mackup...\n'
	pip install --upgrade mackup
	)
	# zsh
	command -v zsh >/dev/null 2>&1 || (
	printf '\ninstalling Zsh...\n'
	apk add zsh zsh-doc
	)
	# chsh
	# part of shadow on Alpine Linux
	command -v chsh >/dev/null 2>&1 || (
	apk add shadow shadow-doc
	)
	# Oh My Zsh
	command -v omz >/dev/null 2>&1 || [ -d "${HOME}/.oh-my-zsh" ] || (
	printf 'installing Oh My Zsh...\n'
	sh -c "$(wget http://web.archive.org/web/20201211072817id_/raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh --output-document -)" "" --unattended --keep-zshrc
	)
	# update, repair everything again before close
	printf '\nupdating...\n'
	apk update --verbose --progress
	printf '\nupgrading...\n'
	apk upgrade --verbose --progress
	printf '\nrepairing and resolving dependencies...\n'
	apk fix --verbose --verbose --depends --progress
	printf '\nverifying installations...\n'
	apk verify --verbose --verbose --progress && printf 'verified.\n'
	command -v pip >/dev/null 2>&1 && (
	printf '\nupdating Python\xe2\x80\x99s package manager...\n'
	python3 -m pip install --upgrade pip
	)
	# cleanup
	printf '\n\ncleaning up temporary installation files and performing housekeeping...\n'
	[ -w apk.static ] && rm apk.static
	[ -w get-pip.py ] && rm get-pip.py
	[ -w setup ] && rm setup
	# message of the day
	[ -e /etc/motd.bak ] || cp /etc/motd /etc/motd.bak
	printf '' >/etc/motd
	# delete thumbnail cache files
	find -- . -type f \( \
	-name '.DS_Store' -or \
	-name 'Desktop.ini' -or \
	-name 'Thumbs.db' -or \
	-name 'desktop.ini' -or \
	-name 'thumbs.db' \
	\) \
	-delete
	# delete empty, writable, zero-length files
	# except those within `.git/` directories
	# and those with specific names
	# https://stackoverflow.com/a/64863398
	find -- . -type f -writable -size 0 \( \
	-not -path '*.git/*' -and \
	-not -name "$(printf 'Icon\xd\xa')" -and \
	-not -name '*LOCK' -and \
	-not -name '*empty*' -and \
	-not -name '*hushlogin' -and \
	-not -name '*ignore' -and \
	-not -name '*journal' -and \
	-not -name '*lock' -and \
	-not -name '*lockfile' -and \
	-not -name '.dirstamp' -and \
	-not -name '.gitkeep' -and \
	-not -name '.gitmodules' -and \
	-not -name '.keep' -and \
	-not -name '.sudo_as_admin_successful' -and \
	-not -name '.watchmanconfig' -and \
	-not -name '__init__.py' -and \
	-not -name 'favicon.*' \
	\) \
	-delete
	# delete empty directories recursively
	# but skip Git-specific and `/.well-known/` directories
	# https://stackoverflow.com/q/4210042#comment38334264_4210072
	find -- . -type d -empty \( \
	-not -path '*.git/*' -and \
	-not -name '.well-known' \
	\) \
	-delete
	# done
	printf '\ninitialization complete\n'
	sleep 0.5
	printf '\nrestarting...\n'
	sleep 1
	printf '\ndone!\n'
	exit

enable tab completion for SSH hostnames

# add tab completion for SSH hostnames based on ~/.ssh/config, ignoring wildcards
# https://github.com/mathiasbynens/dotfiles/commit/fecb8c6
[ -e "$HOME/.ssh/config" ] && complete -o "default" -o "nospace" -W "$(grep "^Host" ~/.ssh/config | grep -v "[?*]" | cut -d " " -f2- | tr ' ' '\n')" scp sftp ssh

for consideration: submodule for package versus package

note to self; context for consideration:

Having seen that I comprise half of zdharma-continuum/zsh-diff-so-fancy’s stargazers, I felt prompted to replace the plugin with the applicable npm package as was done with git-open (802072a92a)

On the other hand, if I move a package from $DOTFILES/.gitmodules (and $DOTFILES/custom/plugins into $(npm config get prefix --global)/bin, then Dependabot will no longer keep nudging me to update.

---

• Would it not be preferable to have Dependabot keep everything updated? (Noting that without symlinking and using npm in ways it’s not meant to be used, there’s no way to create a package.json and package-lock.json)

add to arrays in a more portable way

Proposal

undo

cb371c4

dotfiles/.zshrc

Lines 93 to 96 in cb371c4

	plugins+=(
	git
	gunstage
	)

a8240df

dotfiles/.zshrc

Lines 95 to 97 in a8240df

	plugins+=(
	zsh-syntax-highlighting
	)

---

rationale α.

both

path=(addition "${path[@]}")

and

path=("${path[@]}" addition)

become possible

rationale ⅰ.

moreover, “In POSIX sh, += is undefined” (SC3024)

`${SHELL##*/}` depends on user configuration; `${0##*[-/]}` does not

The scripts below appear shell-agnostic, but if running them using Bash on a system whose ${SHELL} is Zsh, they don’t work at all.

For example, instead of:

. "${HOME}/.${SHELL##*/}rc" && exec "${SHELL##*/}" --login

we should use:

. "${HOME}/.${0##*[-/]}rc" && exec "${0##*[-/]}" --login

dotfiles/.oh-my-zsh/custom/aliases.zsh

Lines 227 to 231 in 124227f

	alias aliases='${EDITOR:-vi} ${ZSH:-${HOME}/.oh-my-${SHELL##*/}}/custom/aliases.${SHELL##*/}; . ${HOME}/.${SHELL##*/}rc && exec ${SHELL##*/} --login'
	alias ohmyzsh='cd ${ZSH:-${HOME}/.oh-my-${SHELL##*/}}'
	alias zshconfig='${EDITOR:-vi} ${HOME}/.${SHELL##*/}rc; . ${HOME}/.${SHELL##*/}rc && exec ${SHELL##*/} --login'
	alias zshenv='${EDITOR:-vi} ${HOME}/.${SHELL##*/}env; . ${HOME}/.${SHELL##*/}rc && exec ${SHELL##*/} --login'
	alias zshrc='${SHELL##*/}config'

`git add --patch` no longer requires a separate installation

Git v2.40.0 removed the Perl version of git add --interactive.

Moreover, git-add--interactive’s installation by way of Alpine Linux’s git-perl has been unnecessary since Git v2.25.0, released in January 2020.

illegible function needs commenting

The core of the brewfile function¹ is unreadable without comments; add them.

Footnotes

1. https://github.com/LucasLarson/dotfiles/blob/b454e337c17beda45a4e5502eede695bc20a8915/custom/aliases.zsh#L90-L102 ↩

`actions/setup-ruby` is deprecated

dotfiles/.github/workflows/changelog.yml

Line 17 in d5e65bb

uses: actions/[email protected]

actions/setup-ruby is deprecated;¹ ruby/setup-ruby² is the recommended replacement.

---

1. actions/setup-ruby@e932e7a#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5R9
2. https://github.com/ruby/setup-ruby

add function-scope preference for unescaped pathnames

show unescaped pathnames where git is already serving human-friendly content

• add -c quotePath=false where git command to target audience-human output instead of git status where scripting is not possible or likely

Where git config allows for scope-wide preference for escaping “unusual[ly]”¹ named paths,² the same functionality is available on a per-invocation level,³ which allows for temporary syntactic sugar without blindingly blunted defaults (the default behavior is to escape and quote such content, which is the safest and most reasonable default, especially in situations where a machine or other third party might parse the output).

To that end, in the instances where this repository calls for a function-scope -c color.status=always, it should call also for unescaped pathnames -c core.quotePath=false.

---

Footnotes

1. scare quotes in original⁴ ↩

2. git config core.quotePath=false ↩

3. git -c core.quotePath=false status, for example, instead of git status ↩

4. https://github.com/git/git/commit/9378c16135 ↩

assigning an alias (`cd -`) to `-` is not portable

An alias whose name begins with - or + is not entirely portable.

• Zsh ≤5.9.0.1-dev chokes¹ on aliases whose names begin with - or + unless the assignment includes an end-of-options delimiter:² alias -='cd -' fails but alias -- -='cd -'³ works as expected
• contrariwise, Busybox on Alpine Linux⁴ chokes on alias -- -='cd -', but alias -='cd -' works as expected

Footnotes

1. https://github.com/LucasLarson/dotfiles/blob/85bdd324fc76c11fb39fd53739c2eaf48b56cf85/custom/aliases.zsh#L79-L86 ↩

2. According to a part of the Zsh FAQ that hasn’t changed since 1999 or earlier, “To begin a zsh alias with a - (dash, hyphen) character, use alias --: . . . alias -- -"=fg %-"” ↩

3. ohmyzsh/ohmyzsh@60e99779d5 ↩

4. Alpine Linux v3.16 appears to run Busybox 1.35.0 (thanks, repology) ↩

non-portable, non-POSIX-compliant `sed` call

changing the default shell with sed -E -i is:

• not portable,
  and it is
• not POSIX-compliant

and the current replacement does:

• not account for distributions where the default shell is dash like Ubuntu and Debian, but that is fine, because while /bin/dash is run, it a symlink to /bin/dash, located at /bin/sh, which is called, and which this solution does replace

dotfiles/setup/init.sh

Line 355 in cc50d8e

command sed -E -i -e "s|/bin/b?a?sh$|$(command -v -- zsh)|" '/etc/passwd'

A variation of the formula appears in CodeSnippets.md:

dotfiles/CodeSnippets.md

Lines 533 to 540 in cc50d8e

	find -- . -type f -exec sed -E -i \
	-e '/\/bin\/b?a?sh/{' \
	-e 's//\/usr\/bin\/env zsh/' \
	-e ':a' \
	-e '$! N' \
	-e '$! b a' \
	-e '}' \
	'{}' ';'

The current solution to change /etc/passwd’s entries containing /bin/sh, /bin/bash, or /bin/ash, to wherever zsh is installed, is broken without proprietary extensions¹ – marked “❗️” – to POSIX sed:²

# https://github.com/LucasLarson/dotfiles/blob/cc50d8e6da/setup/init.sh#L346
#                     ╭──────────────────── ❗️ extended regex
#                     │  ╭───────────────── ❗️ modify files in-place
#                     │  │  ╭────────────── expression incoming
#                     │  │  │  ╭─────────── search for
#                     │  │  │  │       ╭─┬─ ❗️ using `?`, more properly `\?`, to
#                     │  │  │  │       │ │  mean “0 or 1” is a GNU extension
         command sed -E -i -e "s|/bin/b?a?sh$|$(command -v -- zsh)|" '/etc/passwd'
#                               │╰────────┬─╯│╰─┬────────────────╯│   ╰─┬───────╯
#    ╭──────────────────────────╯         ╰─╮╰╮ │ ╭───────────────╯     │
#    ╰─ search for what’s between here and  │ │ │ │ ╭───────────────────╯
#                             the next `|`  │ │ │ │ │
# any line ending (`$`) in any of`/bin/sh` ─╯ │ │ │ │
#      `/bin/bash`, `/bin/bsh`, `/bin/ash`    │ │ │ │
#    replace with everything from this `|` ───╯ │ │ │
#                          to the last `|`      │ │ │
#  the Z shell binary’s location, which is ─────╯ │ │
#    probably `/bin/zsh` or `/usr/bin/zsh`        │ │
#          replacement expression complete ───────╯ │
#             file with content to replace ─────────╯

Footnotes

1. gnu.org/s/sed/manual/html_node/BRE-syntax § \? ↩

2. opengroup.org/onlinepubs/9699919799/utilities/sed.html § Regular Expressions in sed ↩

is `git log` alias `git log` better implemented by @ohmyzsh than @gggritso?

dotfiles/.oh-my-zsh/custom/aliases.zsh

Lines 72 to 74 in 100a132

	# git log
	# https://github.com/gggritso/gggritso.com/blob/a07b620/_posts/2015-08-23-human-git-aliases.md#readme
	alias glog="git log --graph --branches --remotes --tags --format=format:'%Cgreen%h %Creset• %<(75,trunc)%s (%cN, %cr) %Cred%d' --date-order"

would @ohmyzsh’s
git log --oneline --decorate --graph¹

serve better than @gggritso’s
git log --graph --branches --remotes --tags --format=format:'%Cgreen%h %Creset• %<(75,trunc)%s (%cN, %cr) %Cred%d' --date-order"²

---

1. https://github.com/ohmyzsh/ohmyzsh/blob/d853ec4b629f24c6622f414f312fbf83cec0990d/plugins/git/git.plugin.zsh#L157
2. https://github.com/gggritso/gggritso.com/blob/a07b620/_posts/2015-08-23-human-git-aliases.md#readme

stackoverrun.com appears down

[✖] https://stackoverrun.com/ja/q/12834672 → Status: 0 Error: ESOCKETTIMEDOUT
at ClientRequest. (/usr/local/lib/node_modules/markdown-link-check/node_modules/request/request.js:816:19)
“apk add composer'を試みているDockerfileが失敗していますか？”

stackoverrun.com › ... - Translate this page
作曲-1.5.2-R0：でマスク：（！恐ろしく時代遅れ）. を@​testingそれはDockerfile 固定テストリポジトリというの作者と思われるので、あなたが @​testing を追加 ...
1 answer

pip installation can be slow: let the user know

dotfiles/setup/linux/alpine/init.sh

Line 92 in 83532da

printf '\ninstalling pip...\n'

add something like “this may take a while”

stackoverrun.com appears down

[✖] https://stackoverrun.com/ja/q/12834672 → Status: 0 Error: ESOCKETTIMEDOUT
at ClientRequest. (/usr/local/lib/node_modules/markdown-link-check/node_modules/request/request.js:816:19)
“apk add composer'を試みているDockerfileが失敗していますか？”

stackoverrun.com › ... - Translate this page
作曲-1.5.2-R0：でマスク：（！恐ろしく時代遅れ）. を@​testingそれはDockerfile 固定テストリポジトリというの作者と思われるので、あなたが @​testing を追加 ...
1 answer

remove access to discontinued OpenAI models

remove Zsh codex while there’s no obvious code-completion successor:

OpenAI has discontinued code-davinci models:

On March 23rd, we will discontinue support for the Codex API. All customers will have to transition to a different model. Codex was initially introduced as a free limited beta in 2021, and has maintained that status to date. Given the advancements of our newest GPT-3.5 models for coding tasks, we will no longer be supporting Codex and encourage all customers to transition to GPT-3.5-Turbo.

On March 23rd, we will discontinue support for the Codex API. All customers will have to transition to a different model. Codex was initially introduced as a free limited beta in 2021, and has maintained that status to date. Given the advancements of our newest GPT-3.5 models for coding tasks, we will no longer be supporting Codex and encourage all customers to transition to GPT-3.5-Turbo.

Models affected
The following models will be discontinued:

code-cushman:001
code-cushman:002
code-davinci:001
code-davinci:002

We understand this transition may be temporarily inconvenient, but we are confident it will allow us to increase our investment in our latest and most capable models.

Originally posted by @oyale in tom-doerr/zsh_codex#16 (comment)

`git.io` deprecation

@github ends 11 years of serving git.io redirections on 2022-04-29¹ after providing 3 days warning. This repository appears to contain affected content: search: git.io

Footnotes

1. github.blog/changelog/2022-04-25-git-io-deprecation ↩

remove `motd` generally

/etc/motd, or message of the day, is generally not helpful

printf '' >/etc/motd

dotfiles/setup/linux/alpine/init.sh

Lines 135 to 136 in 83532da

	# cleanup
	printf '\n\ncleaning up temporary installation files and housekeeping...\n'

`find -exec` and `xargs` must 𝑛𝑜𝑡 be followed by `command`

On Debian, the instruction will choke. command git should be git here:

dotfiles/custom/aliases.zsh

Line 81 in 45645bd

command xargs -n 1 command git branch --delete --verbose

`git add -p` isn’t always in `/usr/libexec`

Verifying git add -p’s installation¹ should allow looking in both /usr/lib/git-core as well as the current search in /usr/libexec/git-core²

Footnotes

1. a Perl file named git-add--interactive³ ↩

2. https://github.com/LucasLarson/dotfiles/blob/f978f2fa3fea0752c3d545e6381d140740606dbe/setup/init.sh#L160 ↩

3. git/git@fc8a8126df/git-add--interactive.perl ↩

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

This repository currently has no open or pending branches.

Detected dependencies

github-actions

.github/workflows/jsonlint.yml

• actions/checkout v4
• peter-evans/create-pull-request v6

.github/workflows/shellcheck-markdown.yml

• actions/checkout v4

.github/workflows/super-linter.yml

• actions/checkout v4
• github/super-linter v5.0.0

---

• Check this box to trigger a request for Renovate to run again on this repository

set shellcheck to check code within Markdown

There is shell code in 2047a6b108/CodeSnippets.md § copy-paste-return that has not been validated — it doesn’t have to be this way: dylanaraps/pure-sh-bible@9d54e96011.

enable `sudo` even for aliases

mathiasbynens/dotfiles@bb8de8b

`cd` is a `builtin` not a `command`

dotfiles/setup/linux/alpine/init.sh

Line 17 in 425efbf

[ -n "${HOME}" ] && command cd -- "${HOME}" || exit 1

---

builtin cd

— @ianmiell, Learn Bash the Hard Way: Master Bash Using The Only Method That Works

use `find -exec` for-loop instead of recursing `find` output SC2044

0efecd2a39/CodeSnippets.md § c (SC2044)

surround with single quotes instead of double for shfmt compliance?

dotfiles/.oh-my-zsh/custom/aliases.zsh

Lines 17 to 30 in 124227f

	alias mu=" \
	cd ${DOTFILES:-${HOME}/Dropbox/dotfiles} && \
	garbage && \
	mackup backup --force --root && \
	git fetch --all && \
	git submodule update --init --recursive && \
	git status"
	alias mux=" \
	cd ${DOTFILES:-${HOME}/Dropbox/dotfiles} && \
	garbage && \
	mackup backup --force --root --verbose && \
	git fetch --all --verbose && \
	git submodule update --init --recursive --remote && \
	git status"

include crufty `.zcompdump` files in `cleanup`

this part of the cleanup function should add a line

-name '.zcompdump-*' or \

to remove cruftily named .zcompdump files such as .zcompdump-oin-5.4.2 or .zcompdump-LPhoneXSMax-5.8.

dotfiles/.oh-my-zsh/custom/aliases.zsh

Lines 185 to 193 in 8c86bfd

	# delete thumbnail cache files
	find -- . -type f \( \
	-name '.DS_Store' -or \
	-name 'Desktop.ini' -or \
	-name 'desktop.ini' -or \
	-name 'Thumbs.db' -or \
	-name 'thumbs.db' \
	\) \
	$verbose -delete

remove archival material from the version-control system

A timeline-based software such as Git requires no previous versions of existing files, nor does it need example or sample files such as these:

• https://github.com/LucasLarson/dotfiles/blob/b81636d4ced1fb4c844a9d8ba8a489d4d979175c/.oh-my-zsh/custom/example.zsh
• https://github.com/LucasLarson/dotfiles/blob/b81636d4ced1fb4c844a9d8ba8a489d4d979175c/.oh-my-zsh/custom/plugins/example/example.plugin.zsh
• https://github.com/LucasLarson/dotfiles/blob/b81636d4ced1fb4c844a9d8ba8a489d4d979175c/.oh-my-zsh/custom/themes/example.zsh-theme
• https://github.com/LucasLarson/dotfiles/blob/b772f0dcc453409833549d3a589ae23ec5765e12/.zshrc.pre-oh-my-zsh

Node global package list

There’s no list of globally installed Node packages analogous to Homebrew’s, there is one being generated by LucasLarson/update@f651abb58a and saved to $DOTFILES/.package-list.json.

Korn shell invocation clears `$HISTFILE`

invoking Korn shell with ksh or ksh93 and granting Korn shell access to $SHELL’s $HISTFILE can corrupt or destroy $HISTFILE.

I’m unable to create a reproducible example.

find alias to delete merged Git branches

# remove branches already merged into default branch
# https://github.com/mathiasbynens/dotfiles/commit/6c16e6b
alias gDM="!git branch --merged | grep -v '\\*' | xargs -n 1 git branch -d"

⚠️ gdm is set to git diff <default branch>

verify `~/.cargo/bin` exists before adding to `$PATH`

dotfiles/.zprofile

Line 1 in 9a9da28

export PATH="$HOME/.cargo/bin:$PATH"

there is no `.mailmap` to prevent multiple identities for each submitter

Merge the profiles of authors committing from multiple email addresses, prompted especially by @github’s @users.noreply.github.com

Action Required: Fix Renovate Configuration

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Error type: undefined. Note: this is a nested preset so please contact the preset author if you are unable to fix it yourself.

regression: `find -size 0` doesn’t find all empty directories

dotfiles/.oh-my-zsh/custom/aliases.zsh

Line 190 in 2a6181d

find . -type d -size 0 \

Even empty directories keep a size (64 b in my testing), and I suspect that is what prevented find from seeing it.

perform a `grep -inrP password`

• perform the search on a pristine clone

fish-like autosuggestions

Add autosuggestions like fish provides which are sort of available for Z shell.

hardcoded references to `edit` will break

edit is not at all portable here:

dotfiles/.oh-my-zsh/custom/aliases.zsh

Lines 224 to 227 in 9c37ff8

	alias aliases='edit ${ZSH:-${HOME}/.oh-my-${SHELL##*/}}/custom/aliases.${SHELL##*/}; . ${HOME}/.${SHELL##*/}rc && exec ${SHELL##*/} --login'
	alias ohmyzsh='cd ${ZSH:-${HOME}/.oh-my-${SHELL##*/}}'
	alias zshconfig='edit ${HOME}/.${SHELL##*/}rc; . ${HOME}/.${SHELL##*/}rc && exec ${SHELL##*/} --login'
	alias zshenv='edit ${HOME}/.${SHELL##*/}env; . ${HOME}/.${SHELL##*/}rc && exec ${SHELL##*/} --login'

A solution like ${EDITOR:-vi}¹ instead of edit² is portable and should replace it.

---

1. this may not be the correct if-not-𝑥-then-𝑦 syntax when calling a binary like /usr/bin/vi, but it’s close
2. edit is defined as:
   

   dotfiles/.zshenv

   Lines 8 to 20 in 9c37ff8

   	if command -v nvim > /dev/null 2>&1; then
   	EDITOR="nvim"
   	elif command -v vim > /dev/null 2>&1; then
   	EDITOR="vim"
   	elif command -v vi > /dev/null 2>&1; then
   	EDITOR="vi"
   	else
   	EDITOR="nano"
   	fi
   	export EDITOR
   	# https://github.com/koalaman/shellcheck/wiki/SC2139/db553bf16fcb86b2cdc77b835e75b9121eacc429#this-expands-when-defined-not-when-used-consider-escaping
   	alias editor='$EDITOR'
   	alias edit="editor"

WS-2019-0379 (Medium) detected in commons-codec-1.10.jar

WS-2019-0379 - Medium Severity Vulnerability

Vulnerable Library - commons-codec-1.10.jar

The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

Path to vulnerable library: /dotfiles/Library/Application Support/PyCharm2019.3/datalore-intellij-plugin/lib/commons-codec-1.10.jar

Dependency Hierarchy:

• ❌ commons-codec-1.10.jar (Vulnerable Library)

Found in HEAD commit: 6b2f9295e9052a76034fb8cf630271b237f4ac7c

Vulnerability Details

Apache commons-codec before version “commons-codec-1.13-RC1” is vulnerable to information disclosure due to Improper Input validation.

Publish Date: 2019-05-20

URL: WS-2019-0379

CVSS 3 Score Details (6.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: Low
  • Integrity Impact: Low
  • Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: apache/commons-codec@48b6157

Release Date: 2019-05-12

Fix Resolution: 1.13-RC1

---

Step up your Open Source Security Game with WhiteSource here

`${HOME%/}` instead of `${HOME-}`

Consider upgrading ${HOME-} references¹ to ${HOME%/}² to avoid $PATH pollution.³

Footnotes

1. search: repo:LucasLarson/dotfiles /\$\{HOME-\}/ ↩

2. BashPitfalls § 28 ↩

3. The Single UNIX Specification, version 4,⁴ says that “[i]f a pathname begins with two successive slash characters, the first component following the leading slash characters may be interpreted in an implementation-defined manner” (via) ↩

4. Single UNIX Specification, Version 4: Base Definitions § 4.13 Pathname Resolution ↩

decimal time

Leah Neukirchen serves decimal time using Ruby;¹ this utility should be available here, too, but should use only POSIX-defined tools and options

Footnotes

1. (archive) ↩

`~/.local/bin` is added to `$PATH` twice

1. from 0b2d044dd4, 2021-02-25:
   

   dotfiles/.zshrc

   Lines 20 to 24 in 913708d

   	# set PATH so it includes applicable private `bin`s
   	test -d "${HOME-}"'/bin' &&
   	PATH="${HOME-}"'/bin'"${PATH:+:${PATH-}}"
   	test -d "${HOME-}"'/.local/bin' &&
   	PATH="${HOME-}"'/.local/bin'"${PATH:+:${PATH-}}"

2. from c66f3bcefd, 2020-12-26:
   

   dotfiles/.zshrc

   Lines 346 to 348 in 913708d

   	# location of Python packages on Linux
   	test -d "${HOME-}"'/.local/bin' &&
   	PATH="${HOME-}"'/.local/bin'"${PATH:+:${PATH-}}"

`cp` should be prepended by `command`

It was a mistake to call cp instead of command cp in LucasLarson/dotfiles@ee3c5bfd59.

cp (and grep) are super likely to be in alias definitions which means their functionality loses idempotence in shell scripts.

reduce duplicate `vim-script` content - autoclosed

Vim uses ~/.vimrc according to @HiPhish¹, whereas Neovim uses $XDG_CONFIG_HOME/init.vim

this repository:

• uses both, and
• contains almost-identical files²

---

1. reddit.com/comments/vp78ug
2. LucasLarson/dotfiles/search (language: vim-script) as of 2022-08-23

the `brew --prefix` variable here doesn’t match @Homebrew’s

0812e27 replaced /usr/local with $BREW_PREFIX, generated here:

dotfiles/.zshrc

Line 171 in 0812e27

BREW_PREFIX="$(brew --prefix)"

Meanwhile at @Homebrew, there is a strong preference for $HOMEBREW_PREFIX:

search results1	query
529	"HOMEBREW_PREFIX"
3	"BREW_PREFIX"

This repository should match theirs.

Footnotes

1. in @Homebrew’s repositories on 2022-03-08 ↩

is `PATH` `coreutils` constructed safely?

if not, then consider:¹

command -v brew >/dev/null 2>&1 &&
[ -d "$(brew --prefix coreutils)" ] &&
PATH="$(brew --prefix coreutils)/libexec/gnubin:${PATH}" &&
export PATH

		"$(brew --prefix)"	"$(brew --prefix coreutils)"
macOS	Intel	/usr/local²	/usr/local/opt/coreutils
	ARM	/opt/homebrew²	/opt/homebrew/opt/coreutils
Linux		/home/linuxbrew/.linuxbrew²	/home/linuxbrew/.linuxbrew/opt/homebrew

---

1. driesvints/dotfiles@388baf1/path.zsh#L17
2. https://github.com/Homebrew/brew/blob/c65d461/docs/Manpage.md#--prefix-formula

use `unset -v` for more portable variable unsetting

This repository should use unset ‑v instead of unset when unsetting variables to ensure better compatibility, portability, and maintainability:

• unset ‑v has been part of the POSIX specification for at least a quarter century and
• more specificity is never the worst choice when intentionally destroying data.

restore bleeding-edge Super-Linter access

the current version of GitHub’s Super-Linter is v4.10.1 but I just
learned that Super-Linter’s latest tag is not synonymous with its
newest tag or release: there are 50 files changed in
github/super-linter@latest...v4.10.1

while leaping to the bleeding edge of software is not appropriate for
every repository, it would probably be preferable here

why “move constant to left side of `=` in shell comparison” at bbcd76e?

Why, in bbcd76e, did the constant move to the left side of the comparison, when that doesn’t appear to match common scripting practice?

---

before:

dotfiles/.zshrc

Line 97 in 36277b6

if [[ "$(uname)" == Darwin ]]; then

after:

dotfiles/.zshrc

Line 97 in bbcd76e

if [[ Darwin == "$(uname)" ]]; then