release: promote next to main

.env.example

@@ -7,8 +7,8 @@
 # URL prefix (useful when deploying to a subdirectory, e.g. /wiki/).
 # BASE_URL=/
 
-# Font Awesome CDN script URL injected into every page.
-# STYLES=https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@7.2.0/js/all.min.js
+# Font Awesome stylesheet loaded only on pages that render Font Awesome icons.
+# FONT_AWESOME_STYLESHEET=https://cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@7.2.0/css/all.min.css
 
 # ---------------------------------------------------------------------------
 # Local development — asset proxy

.github/CODEOWNERS

@@ -0,0 +1,5 @@
+# Require the maintainer to approve generated zsh-lint reference updates.
+/community/04_zsh_lint/index.mdx @ss-o
+
+# Protect this targeted review policy.
+/.github/CODEOWNERS @ss-o

.github/instructions/docusaurus-config.instructions.md

@@ -15,7 +15,7 @@ Full reference: <https://docusaurus.io/docs/api/docusaurus-config>
 - Environment variables for deployment-flexible values:
   - `URL` → site origin (default: `https://wiki.zshell.dev`)
   - `BASE_URL` → base path (default: `/`)
-  - `STYLES` → external stylesheet/script URL
+  - `FONT_AWESOME_STYLESHEET` → Font Awesome CSS distribution URL
 
 ## Core Settings
 

.github/workflows/ci-perf.yml

@@ -16,6 +16,8 @@ on:
       - "package.json"
       - "pnpm-lock.yaml"
       - "docusaurus.config.ts"
+      - "functions/**"
+      - "scripts/llms/**"
       - "src/**"
       - "static/**"
       - "!docs/**"
@@ -46,7 +48,7 @@ jobs:
       issues: write # for preactjs/compressed-size-action to create comments
     steps:
       - name: "⤵️ Check out code from GitHub"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: "📦 Setup pnpm"
@@ -74,7 +76,7 @@ jobs:
       contents: read
     steps:
       - name: "⤵️ Check out code from GitHub"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: "📦 Setup pnpm"

.github/workflows/codeql.yml

@@ -64,7 +64,7 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
       - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       # Add any setup steps before running the `github/codeql-action/init` action.
       # This includes steps like installing compilers or runtimes (`actions/setup-node`
@@ -74,7 +74,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
+        uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
@@ -103,6 +103,6 @@ jobs:
           exit 1
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1
+        uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
         with:
           category: "/language:${{matrix.language}}"

.github/workflows/crowdin-download.yml

@@ -25,11 +25,11 @@ jobs:
       cancel-in-progress: true
     steps:
       - name: "⤵️ Check out code from GitHub"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: "🚀 Crowdin Download"
-        uses: crowdin/github-action@e0c8f73cdc0fafde9396e056c5038217000a32d1 # v2.16.4
+        uses: crowdin/github-action@c7af9bc98b01694653031fef2a0dc6c7888ce9bc # v2.17.0
         with:
           upload_sources: false
           upload_translations: false

.github/workflows/crowdin-upload.yml

@@ -31,11 +31,11 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: "⤵️ Check out code from GitHub"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: "🚀 Crowdin Upload"
-        uses: crowdin/github-action@e0c8f73cdc0fafde9396e056c5038217000a32d1 # v2.16.4
+        uses: crowdin/github-action@c7af9bc98b01694653031fef2a0dc6c7888ce9bc # v2.17.0
         with:
           upload_sources: true
           upload_translations: false

.github/workflows/llms-corpus.yml

@@ -0,0 +1,53 @@
+---
+name: LLM Corpus Contract
+
+on:
+  pull_request:
+    branches: [main, next]
+    paths:
+      - ".github/workflows/llms-corpus.yml"
+      - "community/**"
+      - "content-policy.json"
+      - "crowdin.yml"
+      - "docs/**"
+      - "docusaurus.config.ts"
+      - "ecosystem/**"
+      - "functions/**"
+      - "i18n/**"
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "scripts/llms/**"
+      - "sidebars.ts"
+      - "static/_headers"
+      - "static/llms.txt"
+  workflow_dispatch: {}
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  validate:
+    name: Validate Corpus
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - name: "⤵️ Check out code from GitHub"
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - name: "📦 Setup pnpm"
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
+      - name: "⎔ Setup Node.js"
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: "22"
+          cache: "pnpm"
+      - name: "📥 Install dependencies"
+        run: pnpm install --frozen-lockfile
+      - name: "🤖 Build and validate corpus"
+        run: pnpm build
+        env:
+          NODE_ENV: development
+          URL: "https://wiki.zshell.dev"

.github/workflows/pages-deployment.yml

@@ -7,7 +7,6 @@ on:
 
 env:
   URL: "https://wiki.zshell.dev"
-  STYLES: ${{ secrets.FA_STYLES_KIT }}
 
 permissions:
   contents: read
@@ -25,7 +24,7 @@ jobs:
     if: github.ref == 'refs/heads/main'
     steps:
       - name: "⤵️  Check out code from GitHub"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: "📦 Setup pnpm"

.github/workflows/r2-sync.yml

@@ -28,7 +28,7 @@ jobs:
     environment: R2
     steps:
       - name: "⤵️ Check out code from GitHub"
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 2
       - name: "⎔ Setup Node.js"

.github/workflows/trunk-check.yml

@@ -23,7 +23,7 @@ jobs:
       actions: read
       checks: write
       contents: read
-    uses: z-shell/.github/.github/workflows/trunk.yml@8ee041623cd5a2892887357ea9f0fb443ff3d2b4 # main
+    uses: z-shell/.github/.github/workflows/trunk.yml@8ea64af43d306521a6424c712a4af53631c683ca # main
     with:
       cache: false
       setup-deps: true