Merge 8b95897adb into 41c5b9677a

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.0 to 4.32.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b20883b0cd...45cbd0c69e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/dependencies.yml

@@ -13,12 +13,12 @@ jobs:
       contents: write # this is needed to push commits and branches
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
         with:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
       - name: Authenticate as @ohmyzsh
@@ -28,7 +28,7 @@ jobs:
           app-id: ${{ secrets.OHMYZSH_APP_ID }}
           private-key: ${{ secrets.OHMYZSH_APP_PRIVATE_KEY }}
       - name: Setup Python
-        uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: "3.12"
           cache: "pip"

.github/workflows/installer.yml

@@ -26,12 +26,12 @@ jobs:
           - macos-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
         with:
           egress-policy: audit
 
       - name: Set up git repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install zsh
         if: runner.os == 'Linux'
         run: sudo apt-get update; sudo apt-get install zsh
@@ -47,12 +47,12 @@ jobs:
       - test
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
         with:
           egress-policy: audit
 
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install Vercel CLI
         run: npm install -g vercel
       - name: Setup project and deploy

.github/workflows/main.yml

@@ -24,12 +24,12 @@ jobs:
     if: github.repository == 'ohmyzsh/ohmyzsh'
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
         with:
           egress-policy: audit
 
       - name: Set up git repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install zsh
         run: sudo apt-get update; sudo apt-get install zsh
       - name: Check syntax

.github/workflows/project.yml

@@ -17,7 +17,7 @@ jobs:
     if: github.repository == 'ohmyzsh/ohmyzsh'
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
         with:
           egress-policy: audit
       - name: Authenticate as @ohmyzsh

.github/workflows/scorecard.yml

@@ -36,12 +36,12 @@ jobs:
 
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
         with:
           egress-policy: audit
 
       - name: "Checkout code"
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
 
@@ -60,6 +60,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
+        uses: github/codeql-action/upload-sarif@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v4.32.2
         with:
           sarif_file: results.sarif

plugins/backupzshrc/README.md

@@ -0,0 +1,52 @@
+# Oh My Zsh Backup Plugin
+
+This plugin provides a convenient way to back up your `~/.zshrc` file locally and to a GitHub repository. It automatically detects changes in the `.zshrc` file, commits them with a timestamped message, and pushes changes to the specified GitHub repository. If you ever rm your zshrc, simply go to your Github repo and check it out.
+
+## Dependencies
+1. Locally installed git with a git config for pulling the repo url and username
+2. A repo in Github https://github.com/yourusername/oh-my-zsh-backup
+    Example: https://github.com/yourusername/oh-my-zsh-backup
+3. Push privileges configured to the main/master origin branch
+4. Create directory privileges for this script - create "$HOME/projects/backups" manually otherwise
+
+## Installation
+
+1. Clone this repository into your Oh My Zsh custom plugins directory:
+
+   ```bash
+   git clone https://github.com/yourusername/oh-my-zsh-backup ~/.oh-my-zsh/custom/plugins/backup
+   ```
+
+2. Add `backup` to the plugins array in your `~/.zshrc` file:
+
+   ```bash
+   plugins=(... backup)
+   ```
+
+3. Restart your terminal.
+
+## Usage
+
+Simply open your terminal or source your `~/.zshrc` file, and the backup will be triggered automatically. Any changes detected in `~/.zshrc` will be backed up to the specified GitHub repository.
+
+## Configuration
+
+### GitHub Username
+
+If your GitHub username is not already set globally, the plugin will prompt you to enter it the first time you run it. Alternatively, you can set it manually using:
+
+```bash
+git config --global user.name "Your Username"
+```
+
+### Branch
+
+By default, the plugin pushes changes to the branch specified GitHub repository is checked out to locally in the "$HOME/projects/backups" backup directory. You can change the target branch by checking out to a new branch in the backup directory.
+
+## Contributions
+
+Contributions are welcome! If you encounter any issues or have suggestions for improvements, please feel free to open an issue or submit a pull request on GitHub.
+
+## License
+
+This plugin is licensed under the MIT License. See the [LICENSE](LICENSE) file for details.

plugins/backupzshrc/backupzshrc.plugin.zsh

@@ -0,0 +1,54 @@
+function backup_zshrc() {
+    # Function to back up ~/.zshrc locally and to a GitHub repository
+    # Runs every time zsh is opened or source ~/.zshrc is run
+    # Checks for git changes, will commit and push changes if detected
+    #
+
+    local current_dir=$(pwd)
+    local backup_dir="$HOME/projects/backups"
+    github_username=$(git config --global user.name | tr '[:upper:]' '[:lower:]' | tr -d '[:space:]')
+    local commit_message="Backup ~/.zshrc at $(date +'%Y_%m_%d-%H%M%S')"
+
+    # Prompt for GitHub username if not set
+    if [[ -z "$github_username" ]]; then
+        read -p "Enter your GitHub username: " github_username
+    fi
+
+    # Create a backup directory if it doesn't exist
+    mkdir -p "$backup_dir"
+
+    cd "$backup_dir" || return
+
+    # Backup ~/.zshrc with a timestamp
+    local timestamp=$(date +'%Y_%m_%d-%H%M%S')
+    local backup_file="$backup_dir/zshrc_backup_$timestamp"
+    cp "$HOME/.zshrc" "$backup_dir/.zshrc"
+
+    changes=$(git diff --quiet --exit-code -- "$backup_dir" || echo "yes")
+
+    if [[ "$changes" == "yes" ]]; then
+        echo "Changes detected in $backup_dir/.zshrc"
+        cp "$HOME/.zshrc" "$backup_file"
+        git add . > /dev/null 2>&1
+        if git commit -m "$commit_message" > /dev/null 2>&1; then
+            if git push > /dev/null 2>&1; then
+                repo_url="https://github.com/$github_username/backups"
+                echo "Backup successfully pushed to GitHub. View it at: $repo_url"
+            else
+                push_error=$(git push 2>&1)
+                echo "Error: Failed to push backup to GitHub. Error details: $push_error"
+            fi
+        else
+            commit_error=$(git commit -m "$commit_message" 2>&1)
+            echo "Error: Failed to commit changes for backup. Error details: $commit_error"
+        fi
+    else
+        echo "No changes detected in $backup_dir for .zshrc"
+    fi
+
+    cd "$backup_dir" || return
+    git add . > /dev/null 2>&1
+    cd "$current_dir" || return
+}
+
+backup_zshrc