Update dependency typescript to v7 - abandoned

.github/workflows/deploy-docs.yml

@@ -27,11 +27,11 @@ jobs:
     name: Build Docusaurus site
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
-          node-version: 24.15.0
+          node-version: 24.19.0
           cache: npm
           cache-dependency-path: website/package-lock.json
 

.github/workflows/link-check.yml

@@ -14,9 +14,9 @@ jobs:
     name: Check links in markdown
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0
+      - uses: lycheeverse/lychee-action@e7477775783ea5526144ba13e8db5eec57747ce8 # v2.9.0
         with:
           args: --no-progress --verbose --include-fragments '**/*.md'
           fail: true

.github/workflows/markdown.yml

@@ -10,11 +10,11 @@ jobs:
     name: Markdown lint + ToCs
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
-          node-version: 24.15.0
+          node-version: 24.19.0
 
       - name: Install doctoc and markdownlint-cli2
         run: npm install -g doctoc markdownlint-cli2

.github/workflows/shellcheck.yml

@@ -9,7 +9,7 @@ jobs:
     name: ShellCheck
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Run ShellCheck
         run: |

.github/workflows/tests-wsl.yml

@@ -14,7 +14,7 @@ jobs:
       run:
         shell: wsl-bash {0}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           submodules: recursive
           set-safe-directory: true

.github/workflows/tests.yml

@@ -32,7 +32,7 @@ jobs:
         name: Install prerequisites
         run: ${{ matrix.prerequisites }}
 
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           submodules: recursive
           set-safe-directory: true

CLAUDE.md

@@ -103,6 +103,14 @@ Same applies to `README.md`, `init/README.md`, `source/README.md`, and `CLAUDE.m
 - **MDX gotcha.** Docusaurus parses markdown as MDX, which treats `<...>` as JSX. The gather script rewrites autolinks (`<https://example.com>` → `[url](url)`); inline `<placeholder>` text inside fenced code blocks is fine. If you write new MDX-incompatible markdown outside code blocks, extend the rewrites.
 - **Deploy.** `.github/workflows/deploy-docs.yml` builds and publishes on push to main when any of the source-of-truth docs or `website/` itself changes.
 
+## Dependabot and Renovate PRs
+
+Never close Dependabot or Renovate PRs, and never write `closes #N` / `fixes #N` / `resolves #N` against one in a commit or PR description — those phrases auto-close
+the linked PR on merge.
+When bundling several bot PRs into one human-authored PR, just land the human PR;
+the bots detect that their changes are now on `main` and close their own PRs (and the dashboard issues) on the next cycle.
+Also do not close the Renovate dependency-dashboard issue (#3) — it's the bot's working state, and Renovate keeps it open by design.
+
 ## CI philosophy
 
 This repo has no PRs and a single user — pushes go straight to main, and the production environment is whatever's on the user's machine. CI exists to surface "this needs your attention" promptly, not to gate merges.

conf/intellij/options/projectView.xml

@@ -1,5 +1,6 @@
 <application>
   <component name="ProjectViewSharedSettings">
+    <option name="autoscrollFromSource" value="true" />
     <option name="autoscrollToSource" value="true" />
   </component>
 </application>

link/.gitignore_global

@@ -45,5 +45,7 @@ Desktop.ini
 .*.swp
 .*.swo
 
-# Claude Code
+# Claude Code — ignore most local agent state, but skills/ is project
+# content (custom slash-commands checked into the repo).
 .claude/
+!.claude/skills/

source/10_java.sh

@@ -12,9 +12,9 @@ jdk() {
 	fi
 }
 
-# Set default JAVA_HOME to the latest installed OpenJDK.
-if [[ -d "$(brew --prefix openjdk 2>/dev/null)" ]]; then
-	JAVA_HOME="$(brew --prefix openjdk)"
+# Set default JAVA_HOME to OpenJDK 25.
+if [[ -d "$(brew --prefix openjdk@25 2>/dev/null)" ]]; then
+	JAVA_HOME="$(brew --prefix openjdk@25)"
 	export JAVA_HOME
 	export PATH="$JAVA_HOME/bin:$PATH"
 fi