add getter for commit or tag

[cubekii]

solves: #119
add custom functions for aui.build.cmake like this

maybe integrate these functions for auib_import?

[Nelonn]

AUI boot already has branch support

[gemini-code-assist]

Code Review

This pull request introduces new CMake utility functions, aui_git_get_latest_tag and aui_git_get_latest_commit, which allow querying remote Git repositories for tags and commit SHAs without cloning. The review feedback identifies several critical improvements: securing git commands against argument injection by using the -- separator, ensuring correct prefix stripping for tags using anchored regex instead of global replacement, safely truncating commit SHAs to avoid potential CMake errors with string(SUBSTRING), and simplifying the Git requirement macro by removing redundant checks after find_package.

[gemini-code-assist]

To prevent potential argument injection if repo_url starts with a hyphen, it is safer to use the -- separator to explicitly mark the end of options for the git ls-remote command.

            COMMAND "${GIT_EXECUTABLE}" ls-remote --tags -- "${repo_url}" "${ARG_PATTERN}"

[gemini-code-assist]

To prevent potential argument injection if repo_url starts with a hyphen, it is safer to use the -- separator to explicitly mark the end of options for the git ls-remote command.

                COMMAND "${GIT_EXECUTABLE}" ls-remote -- "${repo_url}" "${_ref}"

[gemini-code-assist]

To prevent potential argument injection if repo_url starts with a hyphen, it is safer to use the -- separator to explicitly mark the end of options for the git ls-remote command.

                COMMAND "${GIT_EXECUTABLE}" ls-remote --symref -- "${repo_url}" HEAD

[gemini-code-assist]

The check for GIT_EXECUTABLE after find_package(Git REQUIRED) is redundant because the REQUIRED keyword already causes CMake to stop with a fatal error if Git is not found. The macro can be simplified.

macro(_git_remote_require_git)
    if(NOT GIT_EXECUTABLE)
        find_package(Git QUIET REQUIRED)
    endif()
endmacro()

[gemini-code-assist]

Using string(REPLACE) to strip the refs/tags/ prefix is risky because it will replace all occurrences of that string within the tag name. It is safer to use string(REGEX REPLACE) with an anchor to only strip the prefix at the beginning of the string.

        string(REGEX REPLACE "^refs/tags/" "" _tag_name "${_ref}")

[gemini-code-assist]

Using string(SUBSTRING) can cause a fatal CMake error if the source string is shorter than the requested length. While a Git SHA is typically 40 characters, using a regex match is a safer way to truncate the string without risking a crash.

        string(REGEX MATCH "^.{0,7}" _commit_sha "${_commit_sha}")

[Alex2772]

aui.boot.cmake is a bloatware