chore: promote development to main (2026-10-26)

.github/renovate.json

@@ -33,9 +33,9 @@
     {
       "description": "Group GitHub Actions non-major updates into one PR",
       "matchManagers": ["github-actions"],
-      "matchUpdateTypes": ["minor", "patch", "pin", "digest"],
-      "groupName": "github-actions-non-major",
-      "groupSlug": "github-actions-non-major"
+      "matchUpdateTypes": ["major", "minor", "patch", "pin", "digest"],
+      "groupName": "github-actions",
+      "groupSlug": "github-actions"
     },
     {
       "description": "GitHub Actions bumps are CI-only — they don't change the bundled extension, so keep them as chore: (non-releasable) rather than deps: (cuts a release).",
@@ -62,12 +62,6 @@
       "automerge": false,
       "labels": ["manual-review"]
     },
-    {
-      "description": "Block typescript v7 — a from-scratch rewrite with no typescript-eslint support yet, which breaks `npm run lint` outright. Re-enable once https://github.com/typescript-eslint/typescript-eslint/issues/10940 ships. Non-major 6.x updates still flow through.",
-      "matchPackageNames": ["typescript"],
-      "matchUpdateTypes": ["major"],
-      "enabled": false
-    },
     {
       "description": "Block eslint v10 — changed the rule-context API (e.g. getFilename()) in a way eslint-config-next's bundled eslint-plugin-react doesn't support yet, which crashes `npm run lint`. Re-enable once eslint-config-next ships a compatible eslint-plugin-react. Non-major 9.x updates still flow through.",
       "matchPackageNames": ["eslint"],

.github/workflows/ci.yml

@@ -46,7 +46,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
-          node-version: 24.22.0
+          node-version: 24.22.1
           cache: 'npm'
 
       - name: Install dependencies
@@ -92,7 +92,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
-          node-version: 24.22.0
+          node-version: 24.22.1
           cache: 'npm'
 
       - name: Install dependencies

.github/workflows/codeql.yml

@@ -38,11 +38,11 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+      - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           languages: javascript-typescript
           queries: security-and-quality
 
-      - uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+      - uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           category: /language:javascript-typescript

.github/workflows/release-please.yml

@@ -95,7 +95,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
-          node-version: 24.22.0
+          node-version: 24.22.1
           cache: 'npm'
 
       - name: Install dependencies

.markdownlint.json

@@ -0,0 +1,3 @@
+{
+  "MD033": { "allowed_elements": ["a", "img", "p", "div"] }
+}

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+  "json.schemaDownload.trustedDomains": ["https://docs.renovatebot.com"]
+}

CLAUDE.md

@@ -34,6 +34,13 @@ bundled promotion still parses):
   `"hidden": true` is release-triggering; that's why `deps` bumps a version
   and `chore`/`ci` don't).
 
+## Git and Commit Guidelines
+
+- Do not append boilerplate text, disclaimers, or watermarks such as
+  "Claude Code helped produce this change." to commit messages, pull
+  request descriptions, or summaries.
+- Keep pull request summaries strictly focused on the changes introduced.
+
 ## Claude Code Attribution
 
 Commits and PRs may note that Claude Code was used (e.g. `Co-Authored-By:

README.md

@@ -1,12 +1,15 @@
 # Workspace File Bookmarks
 
-<p style="text-align: center;">[![Version](https://vsmarketplacebadges.dev/version/Wikid82.workspace-file-bookmarks.svg?label=VS%20Code%20Marketplace)](https://marketplace.visualstudio.com/items?itemName=Wikid82.workspace-file-bookmarks)
-[![Installs](https://vsmarketplacebadges.dev/installs-short/Wikid82.workspace-file-bookmarks.svg)](https://marketplace.visualstudio.com/items?itemName=Wikid82.workspace-file-bookmarks)
-[![Rating](https://vsmarketplacebadges.dev/rating-short/Wikid82.workspace-file-bookmarks.svg)](https://marketplace.visualstudio.com/items?itemName=Wikid82.workspace-file-bookmarks)
-[![License](https://img.shields.io/github/license/Wikid82/file_bookmarks)](LICENSE)<br>
-<a href="https://app.aikido.dev/audit-report/external/vys4mwK7BOmHeifhnlOz1VIB/request" target="_blank">
-    <img src="https://app.aikido.dev/assets/badges/full-light-theme.svg" alt="Aikido Security Audit Report" height="40" />    
-</a></p>
+<div style="text-align: center;">
+
+[![Version](https://vsmarketplacebadges.dev/version/Wikid82.workspace-file-bookmarks.png?label=VS%20Code%20Marketplace)](https://marketplace.visualstudio.com/items?itemName=Wikid82.workspace-file-bookmarks)
+[![Installs](https://vsmarketplacebadges.dev/installs-short/Wikid82.workspace-file-bookmarks.png)](https://marketplace.visualstudio.com/items?itemName=Wikid82.workspace-file-bookmarks)
+[![Rating](https://vsmarketplacebadges.dev/rating-short/Wikid82.workspace-file-bookmarks.png)](https://marketplace.visualstudio.com/items?itemName=Wikid82.workspace-file-bookmarks)
+[![License](https://img.shields.io/github/license/Wikid82/file_bookmarks)](LICENSE)</div>
+<div style="text-align: center;">
+<a href="https://app.aikido.dev/audit-report/external/vys4mwK7BOmHeifhnlOz1VIB/request">
+  <img src="https://raw.githubusercontent.com/Wikid82/Workspace-File-Bookmarks/refs/heads/development/public/images/aikido.jpg" alt="Aikido Security Audit Report" width="50" />
+</a></div>
 
 Working across a multi-root or multi-repo workspace means the files you care about are scattered across folders you keep re-opening. **Workspace File Bookmarks** gives you one sidebar to pin the files you actually use — organized into your own folders, one click away, no matter which repo they live in.