bump: add --start-with option to retrieve a subset of results

[EricFromCanada]

• Have you followed the guidelines in our Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same change?
• Have you added an explanation of what your changes do and why you'd like us to include them?
• Have you written new tests for your changes? Here's an example.
• Have you successfully run brew style with your changes locally?
• Have you successfully run brew typecheck with your changes locally?
• Have you successfully run brew tests with your changes locally?

---

Re-enables the Repology methods disabled in #11624 since they appear to be working again. Also implements the following for brew bump:

• --start-with which, when passed a letter or word, fetches results that follow that term (inclusive)
• reordered results so the livecheck version is in between the formula version and the Repology version, since it's more likely to reflect the ideal version for the formula
• fix for --limit showing one more result than requested
• fixes for API returning results in non-alphabetical order
• output "cask version" for casks
• headings and extra line break if listing both formulae and casks
• display "[name] is up to date!" line in green
• automatically install curl to ensure TLS 1.3 support

Sample output:

$ brew bump --start-with=z
==> Querying outdated formulae from Repology
2 outdated formulae found

==> Querying outdated casks from Repology
2 outdated casks found

==> Formulae
==> zeek
Current formula version:  4.1.0
Latest livecheck version: 4.1.1
Latest Repology version:  4.1.1
Open pull requests:       zeek 4.1.1 (https://github.com/Homebrew/homebrew-core/pull/85849)

==> zorba
Current formula version:  3.1
Latest livecheck version: 3.1
Latest Repology version:  4.0
Open pull requests:       none

==> Casks
==> zandronum
Current cask version:     3.0
Latest livecheck version: unable to get versions
Latest Repology version:  3.0.1
Open pull requests:       none

==> zeplin
Current cask version:     3.24,1276
Latest livecheck version: 3.24,1276
Latest Repology version:  6.8.0
Open pull requests:       none

[BrewTestBot]

Review period will end on 2021-09-28 at 00:00:00 UTC.

[MikeMcQuaid]

Code looks good!

• --initial which, when passed a letter or word, fetches results that follow that term (inclusive)

What about something like --starts-with or something?

[BrewTestBot]

Review period ended.

[EricFromCanada]

Both of the repology.org servers appear to again be TLS 1.3-only, which macOS's shipping curl doesn't support.

% /usr/bin/curl --tlsv1.2 --tls-max 1.2 --disable --cookie-jar /dev/null --globoff --show-error --user-agent Homebrew/3.2.13-78-gf7d8e4d-dirty\ \(Macintosh\;\ Intel\ Mac\ OS\ X\ 10.12.6\)\ curl/7.54.0 --header Accept-Language:\ en --retry 3 https://repology.org/api/v1/projects/\?inrepo=homebrew\&outdated=1
curl: (35) error:1400442E:SSL routines:CONNECT_CR_SRVR_HELLO:tlsv1 alert protocol version
% /usr/bin/curl --tlsv1.3 --tls-max 1.3 --disable --cookie-jar /dev/null --globoff --show-error --user-agent Homebrew/3.2.13-78-gf7d8e4d-dirty\ \(Macintosh\;\ Intel\ Mac\ OS\ X\ 10.12.6\)\ curl/7.54.0 --header Accept-Language:\ en --retry 3 https://repology.org/api/v1/projects/\?inrepo=homebrew\&outdated=1
curl: (4) LibreSSL was built without TLS 1.3 support

[MikeMcQuaid]

@EricFromCanada oh no! I think reasonable to make brew bump require curl to be installed in those cases?

[EricFromCanada]

It's now working after making use of use_homebrew_curl from #11773. Also added a warning if brewed curl is not installed.

[MikeMcQuaid]

Looks good once tests are fixed!

[MikeMcQuaid]

Need to handle curl formula not existing.

[EricFromCanada]

Another thought: it might be useful if, when run without specifying a list of packages, the command only checked for open pull requests if the current version does not match the livecheck version.

[EricFromCanada]

Currently stuck on how to get repology_spec to pass, either by a) installing TLS 1.3-capable curl during the test, or b) faking the query and its result somehow.

[MikeMcQuaid]

installing TLS 1.3-capable curl during the test

I wonder if we can do something like install a curl before the test and then pass the path for it through in a way that will be used by all tests?

[EricFromCanada]

My current workaround is to add the new :needs_tls13 flag to the associated tests so they only run on systems whose built-in curl includes TLS 1.3 support, i.e. ubuntu-latest. For everyone else, using brew bump will have it install and use brewed curl.

[MikeMcQuaid]

👍🏻. Would be good to install curl as part of the GitHub Actions tests to avoid the skip warning.

[MikeMcQuaid]

Looks great, nice work as usual @EricFromCanada!