Merge gitea/main, preserving security fixes and current dependency versions

cli/aitbc_cli/utils/__init__.py

@@ -365,3 +365,4 @@ def create_http_client_with_retry(
         transport=RetryTransport(),
         timeout=timeout
     )
+from .subprocess import run_subprocess

cli/aitbc_cli/utils/subprocess.py

@@ -0,0 +1,31 @@
+import subprocess
+import sys
+from typing import List, Optional, Union, Any
+from . import error, output
+
+def run_subprocess(cmd: List[str], check: bool = True, capture_output: bool = True, shell: bool = False, **kwargs: Any) -> Optional[Union[str, subprocess.CompletedProcess]]:
+    """Run a subprocess command safely with logging"""
+    try:
+        if shell:
+            # When shell=True, cmd should be a string
+            cmd_str = " ".join(cmd) if isinstance(cmd, list) else cmd
+            result = subprocess.run(cmd_str, shell=True, check=check, capture_output=capture_output, text=True, **kwargs)
+        else:
+            result = subprocess.run(cmd, check=check, capture_output=capture_output, text=True, **kwargs)
+            
+        if capture_output:
+            return result.stdout.strip()
+        return result
+        
+    except subprocess.CalledProcessError as e:
+        error(f"Command failed with exit code {e.returncode}")
+        if capture_output and getattr(e, 'stderr', None):
+            print(e.stderr, file=sys.stderr)
+        if check:
+            sys.exit(e.returncode)
+        return getattr(e, 'stdout', None) if capture_output else None
+    except Exception as e:
+        error(f"Failed to execute command: {e}")
+        if check:
+            sys.exit(1)
+        return None