update zen browser to 1.19.2b

scrape github release page for changelog
harden release tag parsing for changelog fetch
2026-03-13 12:44:43 +00:00 · 2026-03-13 12:44:06 +00:00 · 2026-03-13 12:40:19 +00:00 · 2026-03-13 12:38:18 +00:00 · 2026-03-13 12:33:07 +00:00 · 2026-03-13 12:26:43 +00:00
11 changed files with 408 additions and 369 deletions
@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+: "${BRANCH:?BRANCH is required}"
+: "${FILE:?FILE is required}"
+: "${COMMIT_MESSAGE:?COMMIT_MESSAGE is required}"
+
+git config user.name "gitea actions"
+git config user.email "actions@localhost"
+
+git checkout -B "$BRANCH"
+git add "$FILE"
+
+if git diff --cached --quiet; then
+  echo "No staged changes for ${FILE}; skipping commit"
+  exit 0
+fi
+
+git commit -m "$COMMIT_MESSAGE"
+git push --force origin "$BRANCH"
@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+: "${GITEA_API:?GITEA_API is required}"
+: "${GITEA_TOKEN:?GITEA_TOKEN is required}"
+: "${BRANCH:?BRANCH is required}"
+: "${TITLE:?TITLE is required}"
+: "${BODY:?BODY is required}"
+
+owner_prefix="${HEAD_OWNER_PREFIX:-thomas}"
+
+existing=$(curl -fsS \
+  -H "Authorization: token ${GITEA_TOKEN}" \
+  "${GITEA_API}/pulls?state=open" \
+  | python -c 'import json,sys,os; d=json.load(sys.stdin); b=os.environ["BRANCH"]; print(next((str(pr["number"]) for pr in d if isinstance(pr,dict) and pr.get("head",{}).get("ref")==b), ""))')
+
+if [ -n "$existing" ]; then
+  echo "PR already exists: #$existing"
+  exit 0
+fi
+
+echo "Creating PR..."
+created="false"
+for head in "${BRANCH}" "${owner_prefix}:${BRANCH}"; do
+  echo "Trying head=${head}"
+  payload=$(HEAD_REF="$head" TITLE="$TITLE" BODY="$BODY" python -c 'import json,os; print(json.dumps({"title": os.environ["TITLE"], "head": os.environ["HEAD_REF"], "base": "main", "body": os.environ["BODY"]}))')
+  response=$(curl -sS -w '\n%{http_code}' -X POST \
+    -H "Authorization: token ${GITEA_TOKEN}" \
+    -H "Content-Type: application/json" \
+    "${GITEA_API}/pulls" \
+    -d "$payload")
+
+  body=$(printf '%s\n' "$response" | sed '$d')
+  code=$(printf '%s\n' "$response" | tail -n1)
+
+  echo "Create PR status: $code"
+  echo "$body"
+
+  if [ "$code" -ge 200 ] && [ "$code" -lt 300 ]; then
+    created="true"
+    break
+  fi
+done
+
+if [ "$created" != "true" ]; then
+  echo "PR creation failed"
+  exit 1
+fi
@@ -0,0 +1,146 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+: "${FILE:?FILE is required}"
+: "${LATEST_RELEASE_URL:?LATEST_RELEASE_URL is required}"
+: "${DOWNLOAD_URL_TEMPLATE:?DOWNLOAD_URL_TEMPLATE is required}"
+: "${RELEASE_API_REPO:?RELEASE_API_REPO is required}"
+
+if command -v python >/dev/null 2>&1; then
+  PYTHON_BIN=python
+elif command -v python3 >/dev/null 2>&1; then
+  PYTHON_BIN=python3
+else
+  echo "python is required but was not found"
+  exit 1
+fi
+
+version_strip_prefix="${LATEST_VERSION_STRIP_PREFIX:-v}"
+release_tag_template="${RELEASE_TAG_TEMPLATE:-{version}}"
+release_tag_template="${release_tag_template//$'\r'/}"
+
+current_version=$($PYTHON_BIN - <<'PY'
+import re
+import os
+p=os.environ['FILE']
+s=open(p).read()
+m=re.search(r'version\s*=\s*"([^"]+)";', s)
+print(m.group(1) if m else "")
+PY
+)
+
+latest_version=$(curl -fsSLI -o /dev/null -w '%{url_effective}' "$LATEST_RELEASE_URL" \
+  | sed -E 's#.*/##')
+
+if [ -n "$version_strip_prefix" ]; then
+  latest_version="${latest_version#${version_strip_prefix}}"
+fi
+
+echo "current=$current_version"
+echo "latest=$latest_version"
+
+if [ -z "$latest_version" ] || [ "$latest_version" = "$current_version" ]; then
+  echo "updated=false" >> "$GITHUB_OUTPUT"
+  exit 0
+fi
+
+download_url="${DOWNLOAD_URL_TEMPLATE//\{version\}/$latest_version}"
+new_hash=$(nix store prefetch-file --json "$download_url" | "$PYTHON_BIN" -c 'import json,sys; print(json.load(sys.stdin)["hash"])')
+
+export LATEST_VERSION="$latest_version"
+export NEW_HASH="$new_hash"
+
+"$PYTHON_BIN" - <<'PY'
+import os
+import re
+p=os.environ['FILE']
+s=open(p).read()
+s=re.sub(r'version\s*=\s*"[^"]+"', f'version = "{os.environ["LATEST_VERSION"]}"', s, count=1)
+s=re.sub(r'hash\s*=\s*"[^"]+"', f'hash = "{os.environ["NEW_HASH"]}"', s, count=1)
+open(p,'w').write(s)
+PY
+
+echo "updated=true" >> "$GITHUB_OUTPUT"
+echo "version=$latest_version" >> "$GITHUB_OUTPUT"
+echo "previous_version=$current_version" >> "$GITHUB_OUTPUT"
+
+release_tag="${release_tag_template//\{version\}/$latest_version}"
+release_tag="${release_tag#\{}"
+release_tag="${release_tag%\}}"
+release_tag="${release_tag#\'}"
+release_tag="${release_tag%\'}"
+
+release_url="${LATEST_RELEASE_URL%/latest}/tag/${release_tag}"
+release_html=$(curl -fsSL "$release_url" || true)
+
+release_notes=""
+if [ -n "$release_html" ]; then
+  release_notes=$(printf '%s' "$release_html" | "$PYTHON_BIN" -c '
+import re, sys
+from html.parser import HTMLParser
+
+html = sys.stdin.read()
+
+m = re.search(r"<div[^>]*data-test-selector=\"body-content\"[^>]*class=\"[^\"]*markdown-body[^\"]*\"[^>]*>(.*?)</div>", html, re.S)
+if not m:
+  print("")
+  raise SystemExit(0)
+
+fragment = m.group(1)
+
+class Extractor(HTMLParser):
+  def __init__(self):
+    super().__init__()
+    self.out = []
+    self.in_code = False
+
+  def handle_starttag(self, tag, attrs):
+    if tag in ("br",):
+      self.out.append("\n")
+    elif tag in ("p", "div", "h1", "h2", "h3", "h4", "h5", "h6", "li"):
+      if self.out and not self.out[-1].endswith("\n"):
+        self.out.append("\n")
+    elif tag in ("pre",):
+      if self.out and not self.out[-1].endswith("\n"):
+        self.out.append("\n")
+      self.out.append("```\n")
+      self.in_code = True
+    elif tag in ("code",) and not self.in_code:
+      self.out.append("`")
+
+  def handle_endtag(self, tag):
+    if tag in ("p", "div", "li", "h1", "h2", "h3", "h4", "h5", "h6"):
+      if not self.out or not self.out[-1].endswith("\n"):
+        self.out.append("\n")
+    elif tag in ("pre",):
+      if not self.out or not self.out[-1].endswith("\n"):
+        self.out.append("\n")
+      self.out.append("```\n")
+      self.in_code = False
+    elif tag in ("code",) and not self.in_code:
+      self.out.append("`")
+
+  def handle_data(self, data):
+    if data:
+      self.out.append(data)
+
+parser = Extractor()
+parser.feed(fragment)
+text = "".join(parser.out)
+text = re.sub(r"\n{3,}", "\n\n", text)
+print(text.strip())
+' || true)
+else
+  echo "warning: failed to fetch release page ${release_url}"
+fi
+
+if [ -z "$release_notes" ]; then
+  release_notes="_No changelog found on upstream release page. Check ${release_url}._"
+fi
+
+delimiter="CHANGELOG_$(date +%s%N)"
+{
+  echo "changelog<<${delimiter}"
+  printf '%s\n' "$release_notes"
+  echo "${delimiter}"
+} >> "$GITHUB_OUTPUT"
@@ -21,119 +21,55 @@ jobs:

      - name: check latest handy release and update file
        id: update
+        env:
+          FILE: modules/pkgs/handy.nix
+          LATEST_RELEASE_URL: https://github.com/cjpais/Handy/releases/latest
+          DOWNLOAD_URL_TEMPLATE: https://github.com/cjpais/Handy/releases/download/v{version}/Handy_{version}_amd64.AppImage
+          RELEASE_API_REPO: cjpais/Handy
+          RELEASE_TAG_TEMPLATE: v{version}
+          GITHUB_TOKEN: ${{ secrets.github_token || secrets.GITHUB_TOKEN }}
        shell: bash
-        run: |
-          set -euo pipefail
-
-          FILE="modules/pkgs/handy.nix"
-
-          current_version=$(python - <<'PY'
-          import re
-          s=open('modules/pkgs/handy.nix').read()
-          m=re.search(r'version\s*=\s*"([^"]+)";', s)
-          print(m.group(1) if m else "")
-          PY
-          )
-
-          latest_version=$(curl -fsSLI -o /dev/null -w '%{url_effective}' \
-            'https://github.com/cjpais/Handy/releases/latest' \
-            | sed -E 's#.*/##' \
-            | sed 's/^v//')
-
-          echo "current=$current_version"
-          echo "latest=$latest_version"
-
-          if [ -z "$latest_version" ] || [ "$latest_version" = "$current_version" ]; then
-            echo "updated=false" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
-
-          url="https://github.com/cjpais/Handy/releases/download/v${latest_version}/Handy_${latest_version}_amd64.AppImage"
-          new_hash=$(nix store prefetch-file --json "$url" | python -c 'import json,sys; print(json.load(sys.stdin)["hash"])')
-
-          export LATEST_VERSION="$latest_version"
-          export NEW_HASH="$new_hash"
-
-          python - <<PY
-          import re
-          import os
-          p='modules/pkgs/handy.nix'
-          s=open(p).read()
-          s=re.sub(r'version\s*=\s*"[^"]+"', f'version = "{os.environ["LATEST_VERSION"]}"', s, count=1)
-          s=re.sub(r'hash\s*=\s*"[^"]+"', f'hash = "{os.environ["NEW_HASH"]}"', s, count=1)
-          open(p,'w').write(s)
-          PY
-
-          echo "updated=true" >> "$GITHUB_OUTPUT"
-          echo "version=$latest_version" >> "$GITHUB_OUTPUT"
+        run: bash .gitea/scripts/update-appimage-nix.sh

      - name: create branch and commit
        if: steps.update.outputs.updated == 'true'
        shell: bash
        run: |
          set -euo pipefail
-          branch="bot/handy-${{ steps.update.outputs.version }}"
+          version="${{ steps.update.outputs.version }}"

-          git config user.name "gitea actions"
-          git config user.email "actions@localhost"
-
-          git checkout -B "$branch"
-          git add modules/pkgs/handy.nix
-          git commit -m "update handy to ${{ steps.update.outputs.version }}"
-          git push --force origin "$branch"
+          BRANCH="bot/handy-${version}" \
+          FILE="modules/pkgs/handy.nix" \
+          COMMIT_MESSAGE="update handy to ${version}" \
+          bash .gitea/scripts/commit-update.sh

      - name: open pull request
        if: steps.update.outputs.updated == 'true'
        env:
          GITEA_TOKEN: ${{ secrets.tea_token || secrets.TEA_TOKEN }}
+          CHANGELOG: ${{ steps.update.outputs.changelog }}
        shell: bash
        run: |
          set -euo pipefail

-          api="https://gitea.unrail.xyz/api/v1/repos/thomas/nixos-config"
-          branch="bot/handy-${{ steps.update.outputs.version }}"
+          version="${{ steps.update.outputs.version }}"
+          previous_version="${{ steps.update.outputs.previous_version }}"
+          release_url="https://github.com/cjpais/Handy/releases/tag/v${version}"

-          if [ -z "${GITEA_TOKEN:-}" ]; then
-            echo "GITEA_TOKEN is empty (check repo secret tea_token/TEA_TOKEN)"
-            exit 1
-          fi
+          pr_body=$(cat <<EOF
+          automated update of handy appimage version and hash

-          echo "Checking for existing PRs..."
-          existing=$(curl -fsS \
-            -H "Authorization: token ${GITEA_TOKEN}" \
-            "${api}/pulls?state=open" \
-            | python -c 'import json,sys; d=json.load(sys.stdin); b="'"$branch"'"; print(next((str(pr["number"]) for pr in d if isinstance(pr,dict) and pr.get("head",{}).get("ref")==b), ""))')
+          ## changelog
+          from \`${previous_version}\` to \`${version}\`

-          if [ -n "$existing" ]; then
-            echo "PR already exists: #$existing"
-            exit 0
-          fi
+          upstream release: ${release_url}

-          echo "Creating PR..."
-          created="false"
-          for head in "${branch}" "thomas:${branch}"; do
-            echo "Trying head=${head}"
-            payload=$(printf '{"title":"update handy to %s","head":"%s","base":"main","body":"automated update of handy appimage version and hash"}' \
-              "${{ steps.update.outputs.version }}" "$head")
-            response=$(curl -sS -w '\n%{http_code}' -X POST \
-              -H "Authorization: token ${GITEA_TOKEN}" \
-              -H "Content-Type: application/json" \
-              "${api}/pulls" \
-              -d "$payload")
+          ${CHANGELOG}
+          EOF
+          )

-            body=$(printf '%s\n' "$response" | sed '$d')
-            code=$(printf '%s\n' "$response" | tail -n1)
-
-            echo "Create PR status: $code"
-            echo "$body"
-
-            if [ "$code" -ge 200 ] && [ "$code" -lt 300 ]; then
-              created="true"
-              break
-            fi
-          done
-
-          if [ "$created" != "true" ]; then
-            echo "PR creation failed"
-            exit 1
-          fi
+          GITEA_API="https://gitea.unrail.xyz/api/v1/repos/thomas/nixos-config" \
+          BRANCH="bot/handy-${version}" \
+          TITLE="update handy to ${version}" \
+          BODY="$pr_body" \
+          bash .gitea/scripts/create-gitea-pr.sh
@@ -21,120 +21,55 @@ jobs:

      - name: check latest helium release and update file
        id: update
+        env:
+          FILE: modules/pkgs/helium.nix
+          LATEST_RELEASE_URL: https://github.com/imputnet/helium-linux/releases/latest
+          DOWNLOAD_URL_TEMPLATE: https://github.com/imputnet/helium-linux/releases/download/{version}/helium-{version}-x86_64.AppImage
+          RELEASE_API_REPO: imputnet/helium-linux
+          RELEASE_TAG_TEMPLATE: '{version}'
+          GITHUB_TOKEN: ${{ secrets.github_token || secrets.GITHUB_TOKEN }}
        shell: bash
-        run: |
-          set -euo pipefail
-
-          FILE="modules/pkgs/helium.nix"
-
-          current_version=$(python - <<'PY'
-          import re
-          p='modules/pkgs/helium.nix'
-          s=open(p).read()
-          m=re.search(r'version\s*=\s*"([^"]+)";', s)
-          print(m.group(1) if m else "")
-          PY
-          )
-
-          latest_version=$(curl -fsSLI -o /dev/null -w '%{url_effective}' \
-            'https://github.com/imputnet/helium-linux/releases/latest' \
-            | sed -E 's#.*/##' \
-            | sed 's/^v//')
-
-          echo "current=$current_version"
-          echo "latest=$latest_version"
-
-          if [ -z "$latest_version" ] || [ "$latest_version" = "$current_version" ]; then
-            echo "updated=false" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
-
-          url="https://github.com/imputnet/helium-linux/releases/download/${latest_version}/helium-${latest_version}-x86_64.AppImage"
-          new_hash=$(nix store prefetch-file --json "$url" | python -c 'import json,sys; print(json.load(sys.stdin)["hash"])')
-
-          export LATEST_VERSION="$latest_version"
-          export NEW_HASH="$new_hash"
-
-          python - <<PY
-          import re
-          import os
-          p='modules/pkgs/helium.nix'
-          s=open(p).read()
-          s=re.sub(r'version\s*=\s*"[^"]+"', f'version = "{os.environ["LATEST_VERSION"]}"', s, count=1)
-          s=re.sub(r'hash\s*=\s*"[^"]+"', f'hash = "{os.environ["NEW_HASH"]}"', s, count=1)
-          open(p,'w').write(s)
-          PY
-
-          echo "updated=true" >> "$GITHUB_OUTPUT"
-          echo "version=$latest_version" >> "$GITHUB_OUTPUT"
+        run: bash .gitea/scripts/update-appimage-nix.sh

      - name: create branch and commit
        if: steps.update.outputs.updated == 'true'
        shell: bash
        run: |
          set -euo pipefail
-          branch="bot/helium-${{ steps.update.outputs.version }}"
+          version="${{ steps.update.outputs.version }}"

-          git config user.name "gitea actions"
-          git config user.email "actions@localhost"
-
-          git checkout -B "$branch"
-          git add modules/pkgs/helium.nix
-          git commit -m "update helium to ${{ steps.update.outputs.version }}"
-          git push --force origin "$branch"
+          BRANCH="bot/helium-${version}" \
+          FILE="modules/pkgs/helium.nix" \
+          COMMIT_MESSAGE="update helium to ${version}" \
+          bash .gitea/scripts/commit-update.sh

      - name: open pull request
        if: steps.update.outputs.updated == 'true'
        env:
          GITEA_TOKEN: ${{ secrets.tea_token || secrets.TEA_TOKEN }}
+          CHANGELOG: ${{ steps.update.outputs.changelog }}
        shell: bash
        run: |
          set -euo pipefail

-          api="https://gitea.unrail.xyz/api/v1/repos/thomas/nixos-config"
-          branch="bot/helium-${{ steps.update.outputs.version }}"
+          version="${{ steps.update.outputs.version }}"
+          previous_version="${{ steps.update.outputs.previous_version }}"
+          release_url="https://github.com/imputnet/helium-linux/releases/tag/${version}"

-          if [ -z "${GITEA_TOKEN:-}" ]; then
-            echo "GITEA_TOKEN is empty (check repo secret tea_token/TEA_TOKEN)"
-            exit 1
-          fi
+          pr_body=$(cat <<EOF
+          automated update of helium appimage version and hash

-          # Skip if PR for this branch already exists
-          existing=$(curl -fsS \
-            -H "Authorization: token ${GITEA_TOKEN}" \
-            "${api}/pulls?state=open" \
-            | python -c 'import json,sys; d=json.load(sys.stdin); b="'"$branch"'"; print(next((str(pr["number"]) for pr in d if pr.get("head",{}).get("ref")==b), ""))')
+          ## changelog
+          from \`${previous_version}\` to \`${version}\`

-          if [ -n "$existing" ]; then
-            echo "PR already exists: #$existing"
-            exit 0
-          fi
+          upstream release: ${release_url}

-          echo "Creating PR..."
-          created="false"
-          for head in "${branch}" "thomas:${branch}"; do
-            echo "Trying head=${head}"
-            payload=$(printf '{"title":"update helium to %s","head":"%s","base":"main","body":"automated update of helium appimage version and hash"}' \
-              "${{ steps.update.outputs.version }}" "$head")
-            response=$(curl -sS -w '\n%{http_code}' -X POST \
-              -H "Authorization: token ${GITEA_TOKEN}" \
-              -H "Content-Type: application/json" \
-              "${api}/pulls" \
-              -d "$payload")
+          ${CHANGELOG}
+          EOF
+          )

-            body=$(printf '%s\n' "$response" | sed '$d')
-            code=$(printf '%s\n' "$response" | tail -n1)
-
-            echo "Create PR status: $code"
-            echo "$body"
-
-            if [ "$code" -ge 200 ] && [ "$code" -lt 300 ]; then
-              created="true"
-              break
-            fi
-          done
-
-          if [ "$created" != "true" ]; then
-            echo "PR creation failed"
-            exit 1
-          fi
+          GITEA_API="https://gitea.unrail.xyz/api/v1/repos/thomas/nixos-config" \
+          BRANCH="bot/helium-${version}" \
+          TITLE="update helium to ${version}" \
+          BODY="$pr_body" \
+          bash .gitea/scripts/create-gitea-pr.sh
@@ -21,118 +21,55 @@ jobs:

      - name: check latest zen browser release and update file
        id: update
+        env:
+          FILE: modules/pkgs/zen-browser.nix
+          LATEST_RELEASE_URL: https://github.com/zen-browser/desktop/releases/latest
+          DOWNLOAD_URL_TEMPLATE: https://github.com/zen-browser/desktop/releases/download/{version}/zen-x86_64.AppImage
+          RELEASE_API_REPO: zen-browser/desktop
+          RELEASE_TAG_TEMPLATE: '{version}'
+          GITHUB_TOKEN: ${{ secrets.github_token || secrets.GITHUB_TOKEN }}
        shell: bash
-        run: |
-          set -euo pipefail
-
-          FILE="modules/pkgs/zen-browser.nix"
-
-          current_version=$(python - <<'PY'
-          import re
-          s=open('modules/pkgs/zen-browser.nix').read()
-          m=re.search(r'version\s*=\s*"([^"]+)";', s)
-          print(m.group(1) if m else "")
-          PY
-          )
-
-          latest_version=$(curl -fsSLI -o /dev/null -w '%{url_effective}' \
-            'https://github.com/zen-browser/desktop/releases/latest' \
-            | sed -E 's#.*/##' \
-            | sed 's/^v//')
-
-          echo "current=$current_version"
-          echo "latest=$latest_version"
-
-          if [ -z "$latest_version" ] || [ "$latest_version" = "$current_version" ]; then
-            echo "updated=false" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
-
-          url="https://github.com/zen-browser/desktop/releases/download/${latest_version}/zen-x86_64.AppImage"
-          new_hash=$(nix store prefetch-file --json "$url" | python -c 'import json,sys; print(json.load(sys.stdin)["hash"])')
-
-          export LATEST_VERSION="$latest_version"
-          export NEW_HASH="$new_hash"
-
-          python - <<PY
-          import re
-          import os
-          p='modules/pkgs/zen-browser.nix'
-          s=open(p).read()
-          s=re.sub(r'version\s*=\s*"[^"]+"', f'version = "{os.environ["LATEST_VERSION"]}"', s, count=1)
-          s=re.sub(r'hash\s*=\s*"[^"]+"', f'hash = "{os.environ["NEW_HASH"]}"', s, count=1)
-          open(p,'w').write(s)
-          PY
-
-          echo "updated=true" >> "$GITHUB_OUTPUT"
-          echo "version=$latest_version" >> "$GITHUB_OUTPUT"
+        run: bash .gitea/scripts/update-appimage-nix.sh

      - name: create branch and commit
        if: steps.update.outputs.updated == 'true'
        shell: bash
        run: |
          set -euo pipefail
-          branch="bot/zen-browser-${{ steps.update.outputs.version }}"
+          version="${{ steps.update.outputs.version }}"

-          git config user.name "gitea actions"
-          git config user.email "actions@localhost"
-
-          git checkout -B "$branch"
-          git add modules/pkgs/zen-browser.nix
-          git commit -m "update zen browser to ${{ steps.update.outputs.version }}"
-          git push --force origin "$branch"
+          BRANCH="bot/zen-browser-${version}" \
+          FILE="modules/pkgs/zen-browser.nix" \
+          COMMIT_MESSAGE="update zen browser to ${version}" \
+          bash .gitea/scripts/commit-update.sh

      - name: open pull request
        if: steps.update.outputs.updated == 'true'
        env:
          GITEA_TOKEN: ${{ secrets.tea_token || secrets.TEA_TOKEN }}
+          CHANGELOG: ${{ steps.update.outputs.changelog }}
        shell: bash
        run: |
          set -euo pipefail

-          api="https://gitea.unrail.xyz/api/v1/repos/thomas/nixos-config"
-          branch="bot/zen-browser-${{ steps.update.outputs.version }}"
+          version="${{ steps.update.outputs.version }}"
+          previous_version="${{ steps.update.outputs.previous_version }}"
+          release_url="https://github.com/zen-browser/desktop/releases/tag/${version}"

-          if [ -z "${GITEA_TOKEN:-}" ]; then
-            echo "GITEA_TOKEN is empty (check repo secret tea_token/TEA_TOKEN)"
-            exit 1
-          fi
+          pr_body=$(cat <<EOF
+          automated update of zen browser appimage version and hash

-          existing=$(curl -fsS \
-            -H "Authorization: token ${GITEA_TOKEN}" \
-            "${api}/pulls?state=open" \
-            | python -c 'import json,sys; d=json.load(sys.stdin); b="'"$branch"'"; print(next((str(pr["number"]) for pr in d if isinstance(pr,dict) and pr.get("head",{}).get("ref")==b), ""))')
+          ## changelog
+          from \`${previous_version}\` to \`${version}\`

-          if [ -n "$existing" ]; then
-            echo "PR already exists: #$existing"
-            exit 0
-          fi
+          upstream release: ${release_url}

-          echo "Creating PR..."
-          created="false"
-          for head in "${branch}" "thomas:${branch}"; do
-            echo "Trying head=${head}"
-            payload=$(printf '{"title":"update zen browser to %s","head":"%s","base":"main","body":"automated update of zen browser appimage version and hash"}' \
-              "${{ steps.update.outputs.version }}" "$head")
-            response=$(curl -sS -w '\n%{http_code}' -X POST \
-              -H "Authorization: token ${GITEA_TOKEN}" \
-              -H "Content-Type: application/json" \
-              "${api}/pulls" \
-              -d "$payload")
+          ${CHANGELOG}
+          EOF
+          )

-            body=$(printf '%s\n' "$response" | sed '$d')
-            code=$(printf '%s\n' "$response" | tail -n1)
-
-            echo "Create PR status: $code"
-            echo "$body"
-
-            if [ "$code" -ge 200 ] && [ "$code" -lt 300 ]; then
-              created="true"
-              break
-            fi
-          done
-
-          if [ "$created" != "true" ]; then
-            echo "PR creation failed"
-            exit 1
-          fi
+          GITEA_API="https://gitea.unrail.xyz/api/v1/repos/thomas/nixos-config" \
+          BRANCH="bot/zen-browser-${version}" \
+          TITLE="update zen browser to ${version}" \
+          BODY="$pr_body" \
+          bash .gitea/scripts/create-gitea-pr.sh
@@ -8,8 +8,10 @@
      zellij
      nixd
      git
+      jujutsu
      lazygit
      pnpm
+      ni

      # LSPs and formatters (previously via Mason)
      stylua
@@ -17,6 +19,7 @@
      pyright
      vscode-langservers-extracted # includes css-lsp, eslint-lsp, html-lsp, json-lsp
      tailwindcss-language-server
+      svelte-language-server
      biome
      typescript-go

@@ -1,88 +1,100 @@
-{ inputs, self, config, ... }: {
+{
+  inputs,
+  self,
+  config,
+  ...
+}: {
+  flake.nixosModules.nixos-host = {pkgs, ...}: {
+    imports = [
+      ../../hardware-configuration.nix
+    ];

-flake.nixosModules.nixos-host = {pkgs, ...}: {
-  imports = [
-    ../../hardware-configuration.nix
-  ];
+    # Bootloader
+    boot.loader.systemd-boot.enable = true;
+    boot.loader.efi.canTouchEfiVariables = true;

-  # Bootloader
-  boot.loader.systemd-boot.enable = true;
-  boot.loader.efi.canTouchEfiVariables = true;
+    # Use latest kernel
+    boot.kernelPackages = pkgs.linuxPackages_latest;

-  # Use latest kernel
-  boot.kernelPackages = pkgs.linuxPackages_latest;
+    # Custom EDID override for Samsung 240Hz on DP-1
+    boot.kernelParams = ["drm.edid_firmware=DP-1:edid/g80.bin"];
+    hardware.firmware = [
+      (pkgs.runCommandNoCC "g80-edid-firmware" {} ''
+        install -Dm444 ${../assets/edid/g80.bin} $out/lib/firmware/edid/g80.bin
+      '')
+    ];

-  # Hostname
-  networking.hostName = "nixos";
+    # Hostname
+    networking.hostName = "nixos";

-  # Networking
-  networking.networkmanager.enable = true;
+    # Networking
+    networking.networkmanager.enable = true;

-  # Time zone
-  time.timeZone = "Europe/Lisbon";
+    # Time zone
+    time.timeZone = "Europe/Lisbon";

-  # Locale
-  i18n.defaultLocale = "en_GB.UTF-8";
-  i18n.extraLocaleSettings = {
-    LC_ADDRESS = "pt_PT.UTF-8";
-    LC_IDENTIFICATION = "pt_PT.UTF-8";
-    LC_MEASUREMENT = "pt_PT.UTF-8";
-    LC_MONETARY = "pt_PT.UTF-8";
-    LC_NAME = "pt_PT.UTF-8";
-    LC_NUMERIC = "pt_PT.UTF-8";
-    LC_PAPER = "pt_PT.UTF-8";
-    LC_TELEPHONE = "pt_PT.UTF-8";
-    LC_TIME = "pt_PT.UTF-8";
-  };
+    # Locale
+    i18n.defaultLocale = "en_GB.UTF-8";
+    i18n.extraLocaleSettings = {
+      LC_ADDRESS = "pt_PT.UTF-8";
+      LC_IDENTIFICATION = "pt_PT.UTF-8";
+      LC_MEASUREMENT = "pt_PT.UTF-8";
+      LC_MONETARY = "pt_PT.UTF-8";
+      LC_NAME = "pt_PT.UTF-8";
+      LC_NUMERIC = "pt_PT.UTF-8";
+      LC_PAPER = "pt_PT.UTF-8";
+      LC_TELEPHONE = "pt_PT.UTF-8";
+      LC_TIME = "pt_PT.UTF-8";
+    };

-  # Printing
-  services.printing.enable = true;
+    # Printing
+    services.printing.enable = true;

-  # Audio
-  services.pulseaudio.enable = false;
-  security.rtkit.enable = true;
-  services.pipewire = {
-    enable = true;
-    alsa.enable = true;
-    alsa.support32Bit = true;
-    pulse.enable = true;
-  };
+    # Audio
+    services.pulseaudio.enable = false;
+    security.rtkit.enable = true;
+    services.pipewire = {
+      enable = true;
+      alsa.enable = true;
+      alsa.support32Bit = true;
+      pulse.enable = true;
+    };

-  # SSH
-  services.openssh = {
-    enable = true;
-    settings = {
-      PermitRootLogin = "no";
+    # SSH
+    services.openssh = {
+      enable = true;
+      settings = {
+        PermitRootLogin = "no";
+      };
+    };
+
+    # User account
+    users.users.${config.username} = {
+      isNormalUser = true;
+      description = "Thomas Gouveia Lopes";
+      extraGroups = ["networkmanager" "wheel"];
+    };
+
+    # Programs
+
+    # Allow unfree
+    nixpkgs.config.allowUnfree = true;
+
+    # Enable flakes
+    nix.settings.experimental-features = ["nix-command" "flakes"];
+
+    # Auto-unlock gnome-keyring on login
+    security.pam.services.login.enableGnomeKeyring = true;
+    security.pam.services.gdm.enableGnomeKeyring = true;
+    security.pam.services.gdm-password.enableGnomeKeyring = true;
+
+    # State version
+    system.stateVersion = "25.11";
+
+    fileSystems."/mnt/endeavour" = {
+      device = "/dev/disk/by-uuid/a32ca052-12a5-4355-bd3b-b4515d9ea4a5";
+      fsType = "ext4";
+      options = ["defaults" "noatime"];
    };
  };
-
-  # User account
-  users.users.${config.username} = {
-    isNormalUser = true;
-    description = "Thomas Gouveia Lopes";
-    extraGroups = [ "networkmanager" "wheel" ];
-  };
-
-  # Programs
-
-  # Allow unfree
-  nixpkgs.config.allowUnfree = true;
-
-  # Enable flakes
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
-
-  # Auto-unlock gnome-keyring on login
-  security.pam.services.login.enableGnomeKeyring = true;
-  security.pam.services.gdm.enableGnomeKeyring = true;
-  security.pam.services.gdm-password.enableGnomeKeyring = true;
-
-  # State version
-  system.stateVersion = "25.11";
-
-	fileSystems."/mnt/endeavour" = {
-	 device = "/dev/disk/by-uuid/a32ca052-12a5-4355-bd3b-b4515d9ea4a5";
-	 fsType = "ext4";
-	 options = [ "defaults" "noatime" ];
-	};
-};
 }
@@ -1,8 +1,4 @@
-{
-  inputs,
-  self,
-  ...
-}: {
+{self, ...}: {
  flake.nixosModules.packages = {pkgs, ...}: {
    environment.systemPackages = with pkgs; [
      fd
@@ -12,6 +8,10 @@
      alacritty
      fzf
      autojump
+      yazi
+      ueberzugpp
+      chafa
+      wl-clipboard
      pulseaudio
      legcord
      quickshell
@@ -22,6 +22,8 @@
      self.packages.${pkgs.stdenv.hostPlatform.system}.handy
      mpv
      ffmpeg
+      tmux
+      obs-studio
    ];
  };
 }
@@ -1,19 +1,19 @@
-{ lib, ... }: {
-  perSystem = { pkgs, ... }: let
+{lib, ...}: {
+  perSystem = {pkgs, ...}: let
    pname = "zen-browser";
-    version = "1.19.1b";
+    version = "1.19.2b";

    src = pkgs.fetchurl {
      url = "https://github.com/zen-browser/desktop/releases/download/${version}/zen-x86_64.AppImage";
-      hash = "sha256-h3lza2C+SxptpcX897Uf/nM8dNILUBXScSNQZlvSIQg=";
+      hash = "sha256-lDn7rIYDgmyUnc3PdIASXfpXBXASL6TEdzyZfT716cI=";
    };

-    appimageContents = pkgs.appimageTools.extract { inherit pname version src; };
+    appimageContents = pkgs.appimageTools.extract {inherit pname version src;};
  in {
    packages.zen-browser = pkgs.appimageTools.wrapType2 {
      inherit pname version src;

-      extraPkgs = pkgs: [ pkgs.ffmpeg-full ];
+      extraPkgs = pkgs: [pkgs.ffmpeg-full];

      extraInstallCommands = ''
        desktop_file=$(find ${appimageContents} -name "*.desktop" | head -n1)
@@ -34,7 +34,7 @@
        description = "Experience tranquillity while browsing the web without people tracking you!";
        homepage = "https://zen-browser.app";
        license = lib.licenses.mpl20;
-        platforms = [ "x86_64-linux" ];
+        platforms = ["x86_64-linux"];
      };
    };
  };
Author	SHA1	Message	Date
gitea actions	2cc80717ff	update zen browser to 1.19.2b	2026-03-13 12:44:43 +00:00
thomas	0c3de60c20	scrape github release page for changelog	2026-03-13 12:44:06 +00:00
thomas	654827d307	harden release tag parsing for changelog fetch	2026-03-13 12:40:19 +00:00
thomas	39be66d752	test workflow	2026-03-13 12:38:18 +00:00
thomas	9f1a71b3b1	test workflow update	2026-03-13 12:33:07 +00:00
thomas	20affab949	edid	2026-03-13 12:26:43 +00:00
thomas	2f8cd172ed	add ni and svelte language server	2026-03-13 12:26:43 +00:00
thomas	40adbf1bef	add yazi ueberzugpp and chafa	2026-03-13 12:26:43 +00:00
thomas	da9a4d1f91	add jujutsu	2026-03-13 12:26:43 +00:00
thomas	ce49499e65	update zen browser to 1.19.2b (#5 ) automated update of zen browser appimage version and hash Co-authored-by: gitea actions <actions@localhost> Reviewed-on: #5	2026-03-13 12:24:56 +00:00
thomas	31116e200b	cleanup helium update / update-helium (push) Successful in 10s Details zen browser update / update-zen-browser (push) Successful in 9s Details handy update / update-handy (push) Successful in 6s Details	2026-03-13 00:35:03 +00:00
thomas	7fe72e311e	tmux and obs	2026-03-12 22:10:40 +00:00
thomas	51903cc47f	update handy to 0.7.10 (#4 ) helium update / update-helium (push) Successful in 6s Details zen browser update / update-zen-browser (push) Successful in 11s Details handy update / update-handy (push) Successful in 5s Details automated update of handy appimage version and hash Co-authored-by: gitea actions <actions@localhost> Reviewed-on: #4	2026-03-11 16:36:29 +00:00