From 2d3d8cac34cbe1ba6e21006a5fa3d024ad06ff15 Mon Sep 17 00:00:00 2001
From: Tsvika Shapira <tsvika@moonmath.ai>
Date: Sun, 27 Sep 2026 21:06:37 +0300
Subject: [PATCH] fix(deps-update): put the audit and outdated reports in the
 PR body

Both steps wrote their `<<EOF` markers to $GITHUB_OUTPUT but printed the
command output to the job log, so the PR body always showed empty
blocks (seen on tsvikas/git-fetch-all#28). Redirect the whole group,
use `uv run -q` to keep uv's own sync messages out, and strip the ANSI
colors that `uv tree --color always` emits.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GyMoD8tx4oz1bpJ1tEL845
---
 .../.github/workflows/deps-update.yml         | 19 +++++++++++++------
 1 file changed, 13 insertions(+), 6 deletions(-)

diff --git a/project_name/.github/workflows/deps-update.yml b/project_name/.github/workflows/deps-update.yml
index 15e1a17..c4caa5c 100644
--- a/project_name/.github/workflows/deps-update.yml
+++ b/project_name/.github/workflows/deps-update.yml
@@ -84,16 +84,23 @@ jobs:
               f.write("updates<<EOF\n" + "\n".join(lines) + "\nEOF\n")
       - name: Run security audit
         id: audit
+        # Here and below: findings must not stop the PR, and without pipefail the
+        # pipeline exits with sed's status. sed strips the colors, which the PR body
+        # would show as raw escape codes.
         run: |
-          echo 'AUDIT<<EOF' >> "$GITHUB_OUTPUT"
-          uv run just deps-audit 2>&1 || true
-          echo 'EOF' >> "$GITHUB_OUTPUT"
+          {
+            echo 'AUDIT<<EOF'
+            uv run -q just deps-audit 2>&1 | sed 's/\x1b\[[0-9;]*m//g'
+            echo 'EOF'
+          } >> "$GITHUB_OUTPUT"
       - name: Check outdated packages
         id: outdated
         run: |
-          echo 'OUTDATED<<EOF' >> "$GITHUB_OUTPUT"
-          uv run just deps-list-outdated 2>&1 || true
-          echo 'EOF' >> "$GITHUB_OUTPUT"
+          {
+            echo 'OUTDATED<<EOF'
+            uv run -q just deps-list-outdated 2>&1 | sed 's/\x1b\[[0-9;]*m//g'
+            echo 'EOF'
+          } >> "$GITHUB_OUTPUT"
       - name: Create Pull Request
         id: cpr
         uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1