Changelog

0.65.1 (2026-08-01)

- Fix timeline not being properly incremental. [Duncan Ogilvie]

- Chore(deps): bump twine from 6.2.0 to 7.0.0 in the python-packages

group. [dependabot[bot]]

Bumps the python-packages group with 1 update: [twine](https://github.com/pypa/twine).

Updates `twine` from 6.2.0 to 7.0.0

- [Release notes](https://github.com/pypa/twine/releases)

- [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)

- [Commits](https://github.com/pypa/twine/compare/6.2.0...7.0.0)

---

updated-dependencies:

- dependency-name: twine

dependency-version: 7.0.0

dependency-type: direct:production

update-type: version-update:semver-major

dependency-group: python-packages

...

0.65.0 (2026-07-27)

- Refresh issue timelines when cross-references change (#168) [Rodos]

Cross-references do not change an issue's updated_at, so an incremental

run never lists the issue and never re-fetches its timeline. An issue

can be referenced from another repository years after its last activity

and the backup would never see it.

On incremental runs with --issue-timeline, ask GraphQL for each item's

cross-reference count and newest timestamp, compare both against what is

already saved, and re-fetch the timeline of anything that differs. Items

the since listing did not return are fetched individually. Both values

are needed: the count alone would miss a reference being added and

another deleted between runs, and the timestamp alone would miss a

deletion.

Pull requests are swept too when they are being stored as issues, which

is the case unless --pulls is used. They need their own query because

the issues connection excludes them, and because totalCount ignores the

itemTypes filter on a pull request although it honours it on an issue,

so their cross-references are counted from the nodes instead. Where that

count may have been truncated, the comparison falls back to the

timestamp alone rather than re-fetching on every run.

This costs one rate-limit point per 100 items against the GraphQL quota,

measured at 6 requests for a repository with 528 issues and pull

requests, and stores no new state: the comparison is against the

cross-references already in each item's timeline_data. A GraphQL failure

warns and leaves the rest of the backup unaffected.

Closes #168

- Add --issue-timeline flag to capture cross-reference events (#168)

[Rodos]

The issue events endpoint never returns cross-references, so an issue

mentioned from another issue or pull request leaves no trace in the

backup. GitHub only exposes those through the timeline endpoint. Full

backups miss them as well as incremental ones.

Adds --issue-timeline, which stores the timeline under a separate

timeline_data key alongside the unmodified event_data. The two

endpoints are complementary rather than nested: the timeline adds

cross-references, commits and reviews, while events carries

referenced entries the timeline drops, so neither replaces the other.

Timeline entries for comments are filtered out, since --issue-comments

already saves the bodies. Everything else is stored verbatim. The flag

is included in --all.

This makes the data obtainable, but does not change incremental

selection: a cross-reference does not bump the referenced issue's

updated_at, so an incremental run still never lists it. That half of

the issue remains open.

References #168

- Chore(deps): bump actions/setup-python from 6 to 7. [dependabot[bot]]

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7.

- [Release notes](https://github.com/actions/setup-python/releases)

- [Commits](https://github.com/actions/setup-python/compare/v6...v7)

---

updated-dependencies:

- dependency-name: actions/setup-python

dependency-version: '7'

dependency-type: direct:production

update-type: version-update:semver-major

...

0.64.2 (2026-07-18)

- Add tests. [Duncan Ogilvie]

- Skip fetching gists that have not been updated. [Duncan Ogilvie]

- Skip retrieving repositories when not necessary. [Duncan Ogilvie]

0.64.1 (2026-07-17)

- Fix exception when DMCA'd/empty gists were backed up. [Duncan Ogilvie]

0.64.0 (2026-07-07)

Fix

- Drain subprocess pipes with reader threads to prevent Windows deadlock

(#519) [Rodos]

On Windows the child's stdout/stderr pipes were never drained, so any

git operation producing more output than the pipe buffer (~8KB) hung

the backup at the first sizeable clone or fetch. Reader threads now

drain both pipes on all platforms, replacing the select() loop.

- Windows no longer hangs and now gets subprocess logging

- Log lines no longer carry a stray \r on Windows, and a final line

without a trailing newline is no longer truncated

- CPU no longer pinned at 100% during git operations on Windows

Adds tests covering the deadlock, log levels, and line handling.

Fixes #519

Other

- Applied diff issuecomment-4900281663. [Peter Gabaldon]

- Fix template URL for watched repositories backup. [Peter Gabaldon]

- Chore(deps): bump setuptools in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [setuptools](https://github.com/pypa/setuptools).

Updates `setuptools` from 82.0.1 to 83.0.0

- [Release notes](https://github.com/pypa/setuptools/releases)

- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)

- [Commits](https://github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)

---

updated-dependencies:

- dependency-name: setuptools

dependency-version: 83.0.0

dependency-type: direct:production

update-type: version-update:semver-major

dependency-group: python-packages

...

- Chore(deps): bump actions/checkout from 6 to 7. [dependabot[bot]]

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.

- [Release notes](https://github.com/actions/checkout/releases)

- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)

- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---

updated-dependencies:

- dependency-name: actions/checkout

dependency-version: '7'

dependency-type: direct:production

update-type: version-update:semver-major

...

- Chore(deps): bump pytest in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [pytest](https://github.com/pytest-dev/pytest).

Updates `pytest` from 9.1.0 to 9.1.1

- [Release notes](https://github.com/pytest-dev/pytest/releases)

- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)

- [Commits](https://github.com/pytest-dev/pytest/compare/9.1.0...9.1.1)

---

updated-dependencies:

- dependency-name: pytest

dependency-version: 9.1.1

dependency-type: direct:production

update-type: version-update:semver-patch

dependency-group: python-packages

...

0.63.0 (2026-06-17)

- Skip repositories with pull requests disabled (HTTP 404) instead of

crashing (#511) [Rodos]

Also harden the advisories/hooks 404 checks to match HTTPError.code instead of a substring.

- Chore(deps): bump pytest in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [pytest](https://github.com/pytest-dev/pytest).

Updates `pytest` from 9.0.3 to 9.1.0

- [Release notes](https://github.com/pytest-dev/pytest/releases)

- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)

- [Commits](https://github.com/pytest-dev/pytest/compare/9.0.3...9.1.0)

---

updated-dependencies:

- dependency-name: pytest

dependency-version: 9.1.0

dependency-type: direct:production

update-type: version-update:semver-minor

dependency-group: python-packages

...

- Chore(deps): bump black in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [black](https://github.com/psf/black).

Updates `black` from 26.3.1 to 26.5.1

- [Release notes](https://github.com/psf/black/releases)

- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)

- [Commits](https://github.com/psf/black/compare/26.3.1...26.5.1)

---

updated-dependencies:

- dependency-name: black

dependency-version: 26.5.1

dependency-type: direct:production

update-type: version-update:semver-minor

dependency-group: python-packages

...

0.62.1 (2026-04-30)

- Document that nothing is saved by default. [Changaco]

- Eliminate trailing spaces. [Changaco]

- Remove pointless and unsafe `export`s in examples. [Changaco]

- Try to clarify what `--incremental` actually does. [Changaco]

- Fix a typo in the README. [Changaco]

- Document that `--all` doesn't imply `--attachments` [Changaco]

- Rename a function to match what it actually does. [Changaco]

- Don't leave files open. [Changaco]

- Remove legacy code in `mkdir_p` function. [Changaco]

- Don't pass stdin when doing so can't do any good. [Changaco]

When the child process doesn't inherit stderr, it can't ask the user for input, so it shouldn't inherit stdin either.

- Use `subprocess.DEVNULL` instead of emulating it. [Changaco]

- Remove bad invocation of the system shell. [Changaco]

- Add missing `context` argument to `urlopen` call. [Changaco]

- Suppress output of call to `git lfs version` [Changaco]

- Handle more network errors. [Changaco]

```python-traceback

```

0.62.0 (2026-04-29)

- Skip checkpoint-equal incremental items. [Duncan Ogilvie]

- Avoid redundant release asset list requests. [Duncan Ogilvie]

- Reduce unnecessary pull requests with incremental fetching. [Duncan

Ogilvie]

- Implement per-resource last_update timestamps. [Duncan Ogilvie]

Closes #62

- Add support for pull request reviews. [Duncan Ogilvie]

Closes #124

- Add support for discussions. [Duncan Ogilvie]

Closes #290

- Add --token-from-gh authentication option. [Duncan Ogilvie]

- Chore(deps): bump pytest in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [pytest](https://github.com/pytest-dev/pytest).

Updates `pytest` from 9.0.2 to 9.0.3

- [Release notes](https://github.com/pytest-dev/pytest/releases)

- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)

- [Commits](https://github.com/pytest-dev/pytest/compare/9.0.2...9.0.3)

---

updated-dependencies:

- dependency-name: pytest

dependency-version: 9.0.3

dependency-type: direct:production

update-type: version-update:semver-patch

dependency-group: python-packages

...

- Chore(deps): bump black in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [black](https://github.com/psf/black).

Updates `black` from 26.3.0 to 26.3.1

- [Release notes](https://github.com/psf/black/releases)

- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)

- [Commits](https://github.com/psf/black/compare/26.3.0...26.3.1)

---

updated-dependencies:

- dependency-name: black

dependency-version: 26.3.1

dependency-type: direct:production

update-type: version-update:semver-patch

dependency-group: python-packages

...

- Chore(deps): bump docker/login-action from 3 to 4. [dependabot[bot]]

Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4.

- [Release notes](https://github.com/docker/login-action/releases)

- [Commits](https://github.com/docker/login-action/compare/v3...v4)

---

updated-dependencies:

- dependency-name: docker/login-action

dependency-version: '4'

dependency-type: direct:production

update-type: version-update:semver-major

...

- Chore(deps): bump docker/setup-qemu-action from 3 to 4.

[dependabot[bot]]

Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3 to 4.

- [Release notes](https://github.com/docker/setup-qemu-action/releases)

- [Commits](https://github.com/docker/setup-qemu-action/compare/v3...v4)

---

updated-dependencies:

- dependency-name: docker/setup-qemu-action

dependency-version: '4'

dependency-type: direct:production

update-type: version-update:semver-major

...

- Chore(deps): bump docker/build-push-action from 6 to 7.

[dependabot[bot]]

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6 to 7.

- [Release notes](https://github.com/docker/build-push-action/releases)

- [Commits](https://github.com/docker/build-push-action/compare/v6...v7)

---

updated-dependencies:

- dependency-name: docker/build-push-action

dependency-version: '7'

dependency-type: direct:production

update-type: version-update:semver-major

...

- Chore(deps): bump docker/setup-buildx-action from 3 to 4.

[dependabot[bot]]

Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4.

- [Release notes](https://github.com/docker/setup-buildx-action/releases)

- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)

---

updated-dependencies:

- dependency-name: docker/setup-buildx-action

dependency-version: '4'

dependency-type: direct:production

update-type: version-update:semver-major

...

- Chore(deps): bump docker/metadata-action from 5 to 6.

[dependabot[bot]]

Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5 to 6.

- [Release notes](https://github.com/docker/metadata-action/releases)

- [Commits](https://github.com/docker/metadata-action/compare/v5...v6)

---

updated-dependencies:

- dependency-name: docker/metadata-action

dependency-version: '6'

dependency-type: direct:production

update-type: version-update:semver-major

...

- Chore(deps): bump the python-packages group with 2 updates.

[dependabot[bot]]

Bumps the python-packages group with 2 updates: [black](https://github.com/psf/black) and [setuptools](https://github.com/pypa/setuptools).

Updates `black` from 26.1.0 to 26.3.0

- [Release notes](https://github.com/psf/black/releases)

- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)

- [Commits](https://github.com/psf/black/compare/26.1.0...26.3.0)

Updates `setuptools` from 82.0.0 to 82.0.1

- [Release notes](https://github.com/pypa/setuptools/releases)

- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)

- [Commits](https://github.com/pypa/setuptools/compare/v82.0.0...v82.0.1)

---

updated-dependencies:

- dependency-name: black

dependency-version: 26.3.0

dependency-type: direct:production

update-type: version-update:semver-minor

dependency-group: python-packages

- dependency-name: setuptools

dependency-version: 82.0.1

dependency-type: direct:production

update-type: version-update:semver-patch

dependency-group: python-packages

...

0.61.5 (2026-02-18)

- Fix empty repository crash due to None timestamp comparison (#489)

[Rodos]

Empty repositories have None for pushed_at/updated_at, causing a

TypeError when compared to the last_update string. Use .get() with

truthiness check to skip None timestamps in incremental tracking.

0.61.4 (2026-02-16)

- Fix HTTP 451 DMCA and 403 TOS handling regression (#487) [Rodos]

The DMCA handling added in PR #454 had a bug: make_request_with_retry()

raises HTTPError before retrieve_data() could check the status code via

getcode(), making the case 451 handler dead code. This also affected

HTTP 403 TOS violations (e.g. jumoog/MagiskOnWSA).

Fix by catching HTTPError in retrieve_data() and converting 451 and

blocked 403 responses (identified by "block" key in response body) to

RepositoryUnavailableError. Non-block 403s (permissions, scopes) still

propagate as HTTPError. Also handle RepositoryUnavailableError in

retrieve_repositories() for the --repository case.

Rewrote tests to mock urlopen (not make_request_with_retry) to exercise

the real code path that was previously untested.

Closes #487

- Chore(deps): bump setuptools in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [setuptools](https://github.com/pypa/setuptools).

Updates `setuptools` from 80.10.2 to 82.0.0

- [Release notes](https://github.com/pypa/setuptools/releases)

- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)

- [Commits](https://github.com/pypa/setuptools/compare/v80.10.2...v82.0.0)

---

updated-dependencies:

- dependency-name: setuptools

dependency-version: 82.0.0

dependency-type: direct:production

update-type: version-update:semver-major

dependency-group: python-packages

...

- Chore(deps): bump setuptools in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [setuptools](https://github.com/pypa/setuptools).

Updates `setuptools` from 80.10.1 to 80.10.2

- [Release notes](https://github.com/pypa/setuptools/releases)

- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)

- [Commits](https://github.com/pypa/setuptools/compare/v80.10.1...v80.10.2)

---

updated-dependencies:

- dependency-name: setuptools

dependency-version: 80.10.2

dependency-type: direct:production

update-type: version-update:semver-patch

dependency-group: python-packages

...

0.61.3 (2026-01-24)

- Fix KeyError: 'Private' when using --all flag (#481) [Rodos]

The repository dictionary uses lowercase "private" key. Use .get() with

the correct case to match the pattern used elsewhere in the codebase.

The bug only affects --all users since --security-advisories short-circuits

before the key access.

- Chore(deps): bump setuptools in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [setuptools](https://github.com/pypa/setuptools).

Updates `setuptools` from 80.9.0 to 80.10.1

- [Release notes](https://github.com/pypa/setuptools/releases)

- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)

- [Commits](https://github.com/pypa/setuptools/compare/v80.9.0...v80.10.1)

---

updated-dependencies:

- dependency-name: setuptools

dependency-version: 80.10.1

dependency-type: direct:production

update-type: version-update:semver-minor

dependency-group: python-packages

...

0.61.2 (2026-01-19)

Fix

- Skip security advisories for private repos unless explicitly

requested. [Lukas Bestle]

- Handle 404 errors on security advisories. [Lukas Bestle]

Other

- Chore(deps): bump black in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [black](https://github.com/psf/black).

Updates `black` from 25.12.0 to 26.1.0

- [Release notes](https://github.com/psf/black/releases)

- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)

- [Commits](https://github.com/psf/black/compare/25.12.0...26.1.0)

---

updated-dependencies:

- dependency-name: black

dependency-version: 26.1.0

dependency-type: direct:production

update-type: version-update:semver-major

dependency-group: python-packages

...

- Docs: Explain security advisories in README. [Lukas Bestle]

- Feat: Only make security advisory dir if successful. [Lukas Bestle]

Avoids empty directories for private repos

0.61.1 (2026-01-13)

- Refactor test fixtures to use shared create_args helper. [Rodos]

Uses the real parse_args() function to get CLI defaults, so when

new arguments are added they're automatically available to all tests.

Changes:

- Add tests/conftest.py with create_args fixture

- Update 8 test files to use shared fixture

- Remove duplicate _create_mock_args methods

- Remove redundant @pytest.fixture mock_args definitions

This eliminates the need to update multiple test files when

adding new CLI arguments.

- Fix fine-grained PAT attachment downloads for private repos (#477)

[Rodos]

Fine-grained personal access tokens cannot download attachments from

private repositories directly due to a GitHub platform limitation.

This adds a workaround for image attachments (/assets/ URLs) using

GitHub's Markdown API to convert URLs to JWT-signed URLs that can be

downloaded without authentication.

Changes:

- Add get_jwt_signed_url_via_markdown_api() function

- Detect fine-grained token + private repo + /assets/ URL upfront

- Use JWT workaround for those cases, mark success with jwt_workaround flag

- Skip download with skipped_at when workaround fails

- Add startup warning when using --attachments with fine-grained tokens

- Document limitation in README (file attachments still fail)

- Add 6 unit tests for JWT workaround logic

0.61.0 (2026-01-12)

- Docs: Add missing `--retries` argument to README. [Lukas Bestle]

- Test: Adapt tests to new argument. [Lukas Bestle]

- Feat: Backup of repository security advisories. [Lukas Bestle]

0.60.0 (2025-12-24)

- Rm max_retries.py. [michaelmartinez]

- Readme. [michaelmartinez]

- Don't use a global variable, pass the args instead. [michaelmartinez]

- Readme, simplify the logic a bit. [michaelmartinez]

- Max_retries 5. [michaelmartinez]

0.59.0 (2025-12-21)

- Add --starred-skip-size-over flag to limit starred repo size (#108)

[Rodos]

Allow users to skip starred repositories exceeding a size threshold

when using --all-starred. Size is specified in MB and checked against

the GitHub API's repository size field.

- Only affects starred repos; user's own repos always included

- Logs each skipped repo with name and size

Closes #108

- Chore: remove deprecated -u/-p password authentication options.

[Rodos]

0.58.0 (2025-12-16)

- Fix retry logic for HTTP 5xx errors and network failures. [Rodos]

Refactors error handling to retry all 5xx errors (not just 502), network errors (URLError, socket.error, IncompleteRead), and JSON parse errors with exponential backoff and jitter. Respects retry-after and rate limit headers per GitHub API requirements. Consolidates retry logic into make_request_with_retry() wrapper and adds clear logging for retry attempts and failures. Removes dead code from 2016 (errors list, _request_http_error, _request_url_error) that was intentionally disabled in commit 1e5a9048 to fix #29.

Fixes #140, #110, #138

- Chore: remove transitive deps from release-requirements.txt. [Rodos]

- Chore(deps): bump urllib3 in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [urllib3](https://github.com/urllib3/urllib3).

Updates `urllib3` from 2.6.1 to 2.6.2

- [Release notes](https://github.com/urllib3/urllib3/releases)

- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)

- [Commits](https://github.com/urllib3/urllib3/compare/2.6.1...2.6.2)

---

updated-dependencies:

- dependency-name: urllib3

dependency-version: 2.6.2

dependency-type: direct:production

update-type: version-update:semver-patch

dependency-group: python-packages

...

0.57.0 (2025-12-12)

- Add GitHub Apps documentation and remove outdated header. [Rodos]

- Add GitHub Apps authentication section with setup steps

and CI/CD workflow example using actions/create-github-app-token

- Remove outdated machine-man-preview header (graduated 2020)

Closes #189

- Docs: add stdin token example to README. [Rodos]

Add example showing how to pipe a token from stdin using

file:///dev/stdin to avoid storing tokens in environment

variables or command history.

Closes #187

- Add --skip-assets-on flag to skip release asset downloads (#135)

[Rodos]

Allow users to skip downloading release assets for specific repositories

while still backing up release metadata. Useful for starred repos with

large assets (e.g. syncthing with 27GB+).

Usage: --skip-assets-on repo1 repo2 owner/repo3

Features:

- Space-separated repos (consistent with --exclude)

- Case-insensitive matching

- Supports both repo name and owner/repo format

0.56.0 (2025-12-11)

Fix

- Replace deprecated git lfs clone with git clone + git lfs fetch --all.

[Rodos]

git lfs clone is deprecated - modern git clone handles LFS automatically.

Using git lfs fetch --all ensures all LFS objects across all refs are

backed up, matching the existing bare clone behavior and providing

complete LFS backups.

Closes #379

- Add Windows support with entry_points and os.replace. [Rodos]

- Replace os.rename() with os.replace() for atomic file operations

on Windows (os.rename fails if destination exists on Windows)

- Add entry_points console_scripts for proper .exe generation on Windows

- Create github_backup/cli.py with main() entry point

- Add github_backup/__main__.py for python -m github_backup support

- Keep bin/github-backup as thin wrapper for backwards compatibility

Closes #112

Other

- Docs: add "Restoring from Backup" section to README. [Rodos]

Clarifies that this tool is backup-only with no inbuilt restore.

Documents that git repos can be pushed back, but issues/PRs have

GitHub API limitations affecting all backup tools.

Closes #246

- Chore(deps): bump urllib3 in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [urllib3](https://github.com/urllib3/urllib3).

Updates `urllib3` from 2.6.0 to 2.6.1

- [Release notes](https://github.com/urllib3/urllib3/releases)

- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)

- [Commits](https://github.com/urllib3/urllib3/compare/2.6.0...2.6.1)

---

updated-dependencies:

- dependency-name: urllib3

dependency-version: 2.6.1

dependency-type: direct:production

update-type: version-update:semver-patch

dependency-group: python-packages

...

- Chore(deps): bump the python-packages group with 3 updates.

[dependabot[bot]]

Bumps the python-packages group with 3 updates: [black](https://github.com/psf/black), [pytest](https://github.com/pytest-dev/pytest) and [platformdirs](https://github.com/tox-dev/platformdirs).

Updates `black` from 25.11.0 to 25.12.0

- [Release notes](https://github.com/psf/black/releases)

- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)

- [Commits](https://github.com/psf/black/compare/25.11.0...25.12.0)

Updates `pytest` from 9.0.1 to 9.0.2

- [Release notes](https://github.com/pytest-dev/pytest/releases)

- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)

- [Commits](https://github.com/pytest-dev/pytest/compare/9.0.1...9.0.2)

Updates `platformdirs` from 4.5.0 to 4.5.1

- [Release notes](https://github.com/tox-dev/platformdirs/releases)

- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/CHANGES.rst)

- [Commits](https://github.com/tox-dev/platformdirs/compare/4.5.0...4.5.1)

---

updated-dependencies:

- dependency-name: black

dependency-version: 25.12.0

dependency-type: direct:production

update-type: version-update:semver-minor

dependency-group: python-packages

- dependency-name: pytest

dependency-version: 9.0.2

dependency-type: direct:production

update-type: version-update:semver-patch

dependency-group: python-packages

- dependency-name: platformdirs

dependency-version: 4.5.1

dependency-type: direct:production

update-type: version-update:semver-patch

dependency-group: python-packages

...

0.55.0 (2025-12-07)

Fix

- Improve error messages for inaccessible repos and empty wikis. [Rodos]

- --all-starred now clones repos without --repositories. [Rodos]

- Warn when --private used without authentication. [Rodos]

- Warn and skip when --starred-gists used for different user. [Rodos]

GitHub's API only allows retrieving starred gists for the authenticated

user. Previously, using --starred-gists when backing up a different user

would silently return no relevant data.

Now warns and skips the retrieval entirely when the target user differs

from the authenticated user. Uses case-insensitive comparison to match

GitHub's username handling.

Fixes #93

Other

- Test: add missing test coverage for case sensitivity fix. [Rodos]

- Docs: fix RST formatting in Known blocking errors section. [Rodos]

- Chore(deps): bump urllib3 from 2.5.0 to 2.6.0. [dependabot[bot]]

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.

- [Release notes](https://github.com/urllib3/urllib3/releases)

- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)

- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---

updated-dependencies:

- dependency-name: urllib3

dependency-version: 2.6.0

dependency-type: direct:production

...

0.54.0 (2025-12-03)

Fix

- Send INFO/DEBUG to stdout, WARNING/ERROR to stderr. [Rodos]

Fixes #182

Other

- Docs: update README testing section and add fetch vs pull explanation.

[Rodos]

0.53.0 (2025-11-30)

Fix

- Case-sensitive username filtering causing silent backup failures.

[Rodos]

GitHub's API accepts usernames in any case but returns canonical case.

The case-sensitive comparison in filter_repositories() filtered out all

repositories when user-provided case didn't match GitHub's canonical case.

Changed to case-insensitive comparison.

Fixes #198

Other

- Avoid rewriting unchanged JSON files for labels, milestones, releases,

hooks, followers, and following. [Rodos]

This change reduces unnecessary writes when backing up metadata that changes

infrequently. The implementation compares existing file content before writing

and skips the write if the content is identical, preserving file timestamps.

Key changes:

- Added json_dump_if_changed() helper that compares content before writing

- Uses atomic writes (temp file + rename) for all metadata files

- NOT applied to issues/pulls (they use incremental_by_files logic)

- Made log messages consistent and past tense ("Saved" instead of "Saving")

- Added informative logging showing skip counts

Fixes #133

0.52.0 (2025-11-28)

- Skip DMCA'd repos which return a 451 response. [Rodos]

Log a warning and the link to the DMCA notice. Continue backing up

other repositories instead of crashing.

Closes #163

- Chore(deps): bump restructuredtext-lint in the python-packages group.

[dependabot[bot]]

Bumps the python-packages group with 1 update: [restructuredtext-lint](https://github.com/twolfson/restructuredtext-lint).

Updates `restructuredtext-lint` from 1.4.0 to 2.0.2

- [Changelog](https://github.com/twolfson/restructuredtext-lint/blob/master/CHANGELOG.rst)

- [Commits](https://github.com/twolfson/restructuredtext-lint/compare/1.4.0...2.0.2)

---

updated-dependencies:

- dependency-name: restructuredtext-lint

dependency-version: 2.0.2

dependency-type: direct:production

update-type: version-update:semver-major

dependency-group: python-packages

...

- Chore(deps): bump actions/checkout from 5 to 6. [dependabot[bot]]

Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.

- [Release notes](https://github.com/actions/checkout/releases)

- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)

- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---

updated-dependencies:

- dependency-name: actions/checkout

dependency-version: '6'

dependency-type: direct:production

update-type: version-update:semver-major

...

- Chore(deps): bump the python-packages group with 3 updates.

[dependabot[bot]]

Bumps the python-packages group with 3 updates: [click](https://github.com/pallets/click), [pytest](https://github.com/pytest-dev/pytest) and [keyring](https://github.com/jaraco/keyring).

Updates `click` from 8.3.0 to 8.3.1

- [Release notes](https://github.com/pallets/click/releases)

- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)

- [Commits](https://github.com/pallets/click/compare/8.3.0...8.3.1)

Updates `pytest` from 8.3.3 to 9.0.1

- [Release notes](https://github.com/pytest-dev/pytest/releases)

- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)

- [Commits](https://github.com/pytest-dev/pytest/compare/8.3.3...9.0.1)

Updates `keyring` from 25.6.0 to 25.7.0

- [Release notes](https://github.com/jaraco/keyring/releases)

- [Changelog](https://github.com/jaraco/keyring/blob/main/NEWS.rst)

- [Commits](https://github.com/jaraco/keyring/compare/v25.6.0...v25.7.0)

---

updated-dependencies:

- dependency-name: click

dependency-version: 8.3.1

dependency-type: direct:production

update-type: version-update:semver-patch

dependency-group: python-packages

- dependency-name: pytest

dependency-version: 9.0.1

dependency-type: direct:production

update-type: version-update:semver-major

dependency-group: python-packages

- dependency-name: keyring

dependency-version: 25.7.0

dependency-type: direct:production

update-type: version-update:semver-minor

dependency-group: python-packages

...

0.51.3 (2025-11-18)

- Test: Add pagination tests for cursor and page-based Link headers.

[Rodos]

- Use cursor based pagination. [Helio Machado]

0.51.2 (2025-11-16)

Fix

- Improve CA certificate detection with fallback chain. [Rodos]

The previous implementation incorrectly assumed empty get_ca_certs()

meant broken SSL, causing false failures in GitHub Codespaces and other

directory-based cert systems where certificates exist but aren't pre-loaded.

It would then attempt to import certifi as a workaround, but certifi wasn't

listed in requirements.txt, causing the fallback to fail with ImportError

even though the system certificates would have worked fine.

This commit replaces the naive check with a layered fallback approach that

checks multiple certificate sources. First it checks for pre-loaded system

certs (file-based systems). Then it verifies system cert paths exist

(directory-based systems like Ubuntu/Debian/Codespaces). Finally it attempts

to use certifi as an optional fallback only if needed.