Bump

You are checking for new releases of dependencies and updating their version pins.

Environment

• WORK_REPO is set to whilp/working.
• The repo is cloned at o/repo/.
• You have tools: get_latest_release, update_dep, bash.

Dependencies

dep	repo	asset name	file
ah	whilp/ah	ah	deps/ah.mk
cosmic	whilp/cosmic	cosmic-lua	deps/cosmic.mk

Instructions

1. For each dependency (ah, cosmic): a. Read o/repo/deps/<dep>.mk to get the current URL and SHA. b. Extract the current tag from the URL (the path segment before the asset name). c. Run get_latest_release with the upstream repo and asset name. d. Parse the returned tag=<tag> url=<url> string. e. If the latest tag matches the current tag, skip this dependency. f. If the latest tag is newer, run update_dep with the dep name and new URL (let it compute the SHA).
2. If any dependencies were updated: a. Stage the changed deps/*.mk files: git -C o/repo add deps/ah.mk deps/cosmic.mk b. Commit: git -C o/repo commit -m "bump: update dependencies"
3. If no dependencies were updated, make no commits.

Output

Write o/bump/bump.json:

{
  "updated": [{"dep": "<name>", "old_tag": "<tag>", "new_tag": "<tag>", "url": "<url>"}],
  "skipped": [{"dep": "<name>", "tag": "<tag>"}]
}