Merge a22dca6ae2 into 9df4ea095f

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.14.0 to 2.14.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](20cf305ff2...e3f713f2d8)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/dependencies.yml

@@ -13,7 +13,7 @@ jobs:
       contents: write # this is needed to push commits and branches
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
         with:
           egress-policy: audit
 

.github/workflows/installer.yml

@@ -26,7 +26,7 @@ jobs:
           - macos-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
         with:
           egress-policy: audit
 
@@ -47,7 +47,7 @@ jobs:
       - test
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
         with:
           egress-policy: audit
 

.github/workflows/main.yml

@@ -24,7 +24,7 @@ jobs:
     if: github.repository == 'ohmyzsh/ohmyzsh'
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
         with:
           egress-policy: audit
 

.github/workflows/project.yml

@@ -17,7 +17,7 @@ jobs:
     if: github.repository == 'ohmyzsh/ohmyzsh'
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
         with:
           egress-policy: audit
       - name: Authenticate as @ohmyzsh

.github/workflows/scorecard.yml

@@ -36,7 +36,7 @@ jobs:
 
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
         with:
           egress-policy: audit
 
@@ -60,6 +60,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
+        uses: github/codeql-action/upload-sarif@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
         with:
           sarif_file: results.sarif

plugins/hcloud/README.md

@@ -112,6 +112,37 @@ plugins=(... hcloud)
 | hcst       | `hcloud server-type list`                 | List all server types                                         |
 | hcit       | `hcloud image list --type system`         | List all system images                                        |
 
+## Prompt function
+
+This plugin provides `hcloud_prompt_info` which can be added to your prompt to display the current Hetzner Cloud context.
+
+- If `HCLOUD_TOKEN` environment variable is set, it displays `HCLOUD_TOKEN` (indicating direct token usage)
+- Otherwise, it displays the active context name
+
+### Usage
+
+Add `$(hcloud_prompt_info)` to your `PROMPT` or `RPROMPT` in your `.zshrc`:
+
+```zsh
+RPROMPT='$(hcloud_prompt_info)'
+```
+
+### Theme variables
+
+| Variable                       | Default         | Description                                      |
+| :----------------------------- | :-------------- | :----------------------------------------------- |
+| `ZSH_THEME_HCLOUD_PREFIX`      | `<hcloud:`      | Prefix before the context name                   |
+| `ZSH_THEME_HCLOUD_SUFFIX`      | `>`             | Suffix after the context name                    |
+| `ZSH_THEME_HCLOUD_TOKEN_TEXT`  | `HCLOUD_TOKEN`  | Text shown when `HCLOUD_TOKEN` env var is set    |
+
+### Example with custom styling
+
+```zsh
+ZSH_THEME_HCLOUD_PREFIX="%{$fg[blue]%}hcloud:("
+ZSH_THEME_HCLOUD_SUFFIX=")%{$reset_color%}"
+RPROMPT='$(hcloud_prompt_info)'
+```
+
 ## Requirements
 
 This plugin requires the [Hetzner Cloud CLI](https://github.com/hetznercloud/cli) to be installed.

plugins/hcloud/hcloud.plugin.zsh

@@ -127,3 +127,20 @@ alias hcdc='hcloud datacenter list'
 alias hcloc='hcloud location list'
 alias hcst='hcloud server-type list'
 alias hcit='hcloud image list --type system'
+
+# Prompt function to display current hcloud context
+# Usage: add $(hcloud_prompt_info) to your PROMPT or RPROMPT
+function hcloud_prompt_info() {
+  # Check if HCLOUD_TOKEN is set (overrides context)
+  if [[ -n "$HCLOUD_TOKEN" ]]; then
+    echo "${ZSH_THEME_HCLOUD_PREFIX=<hcloud:}${ZSH_THEME_HCLOUD_TOKEN_TEXT=HCLOUD_TOKEN}${ZSH_THEME_HCLOUD_SUFFIX=>}"
+    return
+  fi
+
+  # Get active context
+  local context
+  context=$(hcloud context active 2>/dev/null)
+  [[ -n "$context" ]] || return
+
+  echo "${ZSH_THEME_HCLOUD_PREFIX=<hcloud:}${context}${ZSH_THEME_HCLOUD_SUFFIX=>}"
+}