From 2fe9fe58e965e4684fca918b4c944a576711c7b4 Mon Sep 17 00:00:00 2001 From: What If We Dig Deeper <1247548+WhatIfWeDigDeeper@users.noreply.github.com> Date: Fri, 15 May 2026 05:23:13 -0400 Subject: [PATCH 1/8] chore: add dependabot npm/uv patch updates and sync tooling config - Configure dependabot for npm and uv ecosystems with weekly patch-only updates and 2-day cooldown - Add .worktreeinclude so .env files are available inside worktree copies - Set CLAUDE_CODE_SUBAGENT_MODEL=sonnet for subagent runs - Sync upstream skills (js-deps, learn, peer-review, pr-comments, pr-human-guide, ship-it, uv-deps) - Record CLAUDE.md learnings about settings.json stash behavior, zsh status readonly, and post-push /pr-comments - Add cooldown to cspell dictionary --- .claude/settings.json | 3 ++- .github/dependabot.yml | 26 ++++++++++++++++++++++++++ .worktreeinclude | 2 ++ CLAUDE.md | 4 +++- cspell.config.yaml | 1 + skills-lock.json | 14 +++++++------- 6 files changed, 41 insertions(+), 9 deletions(-) create mode 100644 .worktreeinclude diff --git a/.claude/settings.json b/.claude/settings.json index 5c49ccbf..582812a5 100644 --- a/.claude/settings.json +++ b/.claude/settings.json @@ -1,7 +1,8 @@ { "model": "opusplan", "env": { - "CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS": "1" + "CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS": "1", + "CLAUDE_CODE_SUBAGENT_MODEL": "sonnet" }, "permissions": { "allow": [ diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9bd01702..567077a0 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -9,3 +9,29 @@ updates: directory: "/" schedule: interval: "weekly" + + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "weekly" + ignore: + - dependency-name: "*" + update-types: [ + "version-update:semver-major", + "version-update:semver-minor" + ] + cooldown: + semver-patch-days: 2 + + - package-ecosystem: "uv" + directory: "/" + schedule: + interval: "weekly" + ignore: + - dependency-name: "*" + update-types: [ + "version-update:semver-major", + "version-update:semver-minor" + ] + cooldown: + semver-patch-days: 2 diff --git a/.worktreeinclude b/.worktreeinclude new file mode 100644 index 00000000..22c4dc5c --- /dev/null +++ b/.worktreeinclude @@ -0,0 +1,2 @@ +.env +**/.env diff --git a/CLAUDE.md b/CLAUDE.md index ea3981d0..4950dc2a 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -164,7 +164,8 @@ Additional notes: - **npm cache permission error (EPERM)**: If `npm` fails with `Your cache folder contains root-owned files` (can recur after `sudo npm install -g`), pass `--cache /tmp/npm-cache-$$` to redirect to a writable temp dir (e.g. `npm outdated --cache /tmp/npm-cache-$$`). Permanent fix: `sudo chown -R 501:20 ~/.npm` - **Subagent `cd` does not persist across Bash calls**: Shell working directory resets between Bash tool calls. Never instruct a subagent to `cd ` in one call and `npm install` in the next — npm will run in the wrong directory (typically the main repo root), silently modifying the wrong `package.json`. Always use `npm install --prefix ` so no `cd` is needed. **`npm run` `--prefix` syntax**: the flag must come before the script name — `npm --prefix /path run