fix: look up actual GitHub release tag instead of assuming v prefix in download URL

[Copilot]

Some GitHub releases use tags without a v prefix (e.g., 18.3.0 instead of v18.3.0). All feature install scripts hardcoded v${version} in the download URL path, causing 404s when the actual tag had no v.

Root cause

github_list_releases strips v from tags to return clean semver strings. The URL template then unconditionally re-adds it — correct when tags use v, broken when they don't.

Changes

• New github_get_tag_for_version function — queries the GitHub releases API and returns the actual tag name for a given version, preserving whatever prefix (or lack thereof) the project uses:

  # tag_name "v18.4.0" → returns "v18.4.0"
  # tag_name "18.4.0"  → returns "18.4.0"

• URL template updated — v${version} → ${releaseTag} in the download path for all affected features

• Error guard added — exits with a clear message if no matching tag is found (e.g., API unreachable or version doesn't exist)

Affected features

atuin.sh, btop, charmbracelet-gum, chezmoi.io, jj-vcs.dev, opencode.ai, smallstep.com, starship.rs, zyedidia-eget, zellij.dev

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/atuinsh/atuin/releases
  • Triggering command: /usr/bin/curl curl -s REDACTED (http block)
• https://api.github.com/repos/atuinsh/atuin/releases/latest
  • Triggering command: /usr/bin/curl curl -s --max-time 10 REDACTED (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>not installed latest atuin</issue_title>
<issue_description>The problem if you set in devcontainer.json:

"features": {
  "ghcr.io/devcontainer-community/devcontainer-features/atuin.sh:1": {}
}

It will lead to an error while create container.

Please check a line: https://github.com/devcontainer-community/devcontainer-features/blob/2793a58e472ff50deadf1d8654f73b004f9d78b3/src/atuin.sh/install.sh#L10C1-L11C1

And last version format: https://github.com/atuinsh/atuin/releases

The "latest" unreleased version comes without prefix "v".

It seems that you need to be more careful when choosing versions.
Or just remove this prefix from the URL, but then it will have to be specified in the option "version".</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes not installed latest atuin #52

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

[sebst]

All of the affected features (atuin.sh, btop, charmbracelet-gum, chezmoi.io, jj-vcs.dev, opencode.ai, smallstep.com, starship.rs, zyedidia-eget, zellij.dev) need a version bump in their respective devcontainer-feature.json

[Copilot]

All of the affected features (atuin.sh, btop, charmbracelet-gum, chezmoi.io, jj-vcs.dev, opencode.ai, smallstep.com, starship.rs, zyedidia-eget, zellij.dev) need a version bump in their respective dev...

Done — bumped patch versions in all 10 affected devcontainer-feature.json files in commit 2eb1c59:

• atuin.sh: 1.0.0 → 1.0.1
• btop: 1.0.0 → 1.0.1
• charmbracelet-gum: 1.0.2 → 1.0.3
• chezmoi.io: 1.0.0 → 1.0.1
• jj-vcs.dev: 1.0.0 → 1.0.1
• opencode.ai: 1.0.1 → 1.0.2
• smallstep.com: 1.0.0 → 1.0.1
• starship.rs: 1.0.0 → 1.0.1
• zyedidia-eget: 1.0.0 → 1.0.1
• zellij.dev: 1.0.0 → 1.0.1