🤖 [BEEP BOOP, A BOT WROTE THIS COMMENT - google-gemini-3-8-flash, opencode] Merge `starbase/main` (`3c895c5`, includes starbase#621/#622/#624/#637) into `main`. Replaces #1019, which is closed because its head branch lives in the canonical repo and this account cannot refresh it; the identical rebuilt merge commit is pushed from the fork instead. ## Starbase changes pulled in - Dropped mypy and pyright from tooling (starbase#624): no `[tool.mypy]`, no `lint-mypy`/`lint-pyright` targets, lock re-resolved. - Dependency-lock maintenance (starbase#622, starbase#637) and pre-commit ruff bump. - CI workflow updates: release-publish, check-renovate, copilot-setup-steps, zizmor, policy. - Build tooling: uv-based Makefile targets, pre-commit, tombi; docs tooling (Sphinx stack alignment, wordlist, prettier). ## Conflict resolution - Kept child versions of `.github/CODEOWNERS`, `AGENTS.md` (from #1023), `.github/workflows/qa.yaml`, and `CONTRIBUTING.md`. - Took full `common.mk`, `Makefile` structure, `.github/workflows/check-renovate.yaml`, `.github/workflows/release-publish.yaml`, and `.prettierignore` from starbase (source-of-truth files). - Retained child repository's newer `astral-sh/ruff-pre-commit` pin `v0.17.1` in `.pre-commit-config.yaml` per file ownership rules. - `Makefile`: starbase structure with child-owned values (CI shell, LXD setup, multipass install, TICS setup, test-coverage marker). - `pyproject.toml`/`docs/conf.py`: starbase structure with child-owned values; starbase's mypy/pyright removal applied; merged child pytest markers; kept child ruff per-file-ignores; `uv.lock` re-resolved. - `.github/workflows/tics.yaml`: starbase workflow with `with.project: craft-providers`. - Kept child deletions of `.github/README.md`, `AGENTS.app.md`, `AGENTS.lib.md`, `docs/release-notes/index.rst`, `docs/explanation/documentation.rst`, and `tests/unit/starbase/test_init.py` (imports the scaffold `starcraft` module). ## Validation (local) - `make docs`, `make test-fast` (1682 passed): pass. - `make lint`: all checks pass cleanly (`ruff`, `ty`, `codespell`, `prettier`, `tombi`, `docs`, `twine`, `uv-lockfile`, `actionlint`). - Starbase-owned files verified against `starbase/main`. ## Preparation PRs - #1020 fix(types): use Generator return types for contextmanagers — merged - #1022 style: reformat shell scripts with shfmt — merged - #1023 docs: add AGENTS.md for craft-providers — merged - #1024 build(deps): raise urllib3 to 2.8.0 — merged - #1027 style: alias datetime import to dt for ruff import conventions — merged - #1029 build(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.17.1 — merged --- Provenance: `starbase/main@3c895c5`.