[LoweRAM]

🤖 [BEEP BOOP, A BOT WROTE THIS PR - Mistral Large 4, opencode]

Merges starbase/main (3c895c5) into main and syncs Starbase-managed updates. Rebuilt from the current heads of origin/main and starbase/main per the refresh procedure, superseding the earlier merge PR (#203, now closed) after all preparation PRs landed.

Starbase changes pulled in

• Docs tooling: Sphinx Stack 2.0 overhaul (docs/.sphinx -> docs/_dev, new docs/Makefile and requirements.txt, _templates, rediraffe redirects, sphinx-llm/llms.txt support, osv-scanner config)
• Workflows: updated check-renovate, policy, tics (project set to debcraft), release-publish, new copilot-setup-steps and zizmor configs, actionlint config, setup-uv v10, refreshed GitHub Actions pins
• Tooling: tombi and shfmt wired into common.mk/pre-commit, ruff hook renamed to ruff-check, ruff select gains TC001-3, per-file-ignores gains PLR0917, mypy/pyright dropped upstream
• Docs scaffold: new quadrant index pages with meta descriptions, how-to-guides renamed to how-to, docs/redirects.txt mechanism
• Templates: AGENTS.app.md/AGENTS.lib.md scaffold and .editorconfig TOML baseline

Conflict resolution

• Took starbase/main for starbase-owned files (common.mk, check-renovate/policy/release-publish/tics workflows, .pre-commit-config.yaml, .editorconfig, docs/Makefile, docs/requirements.txt, docs/_dev/, docs/_templates/, actionlint/zizmor/osv-scanner configs); tics.yaml additionally sets with.project: debcraft
• .pre-commit-config.yaml: starbase's ruff-check hook id and shfmt hook, but kept the child's newer ruff-pre-commit pin (v0.17.1 over starbase's v0.17.0) to avoid a hook downgrade
• Kept child versions of qa.yaml, CONTRIBUTING.md, AGENTS.md and uv.lock (regenerated after the pyproject changes); kept .github/README.md and tests/unit/starbase/ deleted (starbase scaffold test not needed in child repositories); kept the AGENTS templates deleted
• pyproject.toml: kept the child [project], dependency-groups (including dev-stonking/dev-tenacious), [tool.uv] extras and ruff src/target-version; took starbase's docs-sphinx-stack group verbatim (renamed from docs-starter-pack) and ruff select/per-file-ignores; kept the child's N818 ignore and the raised oauthlib/urllib3 constraint floors
• Makefile: kept PROJECT, the active distro-codename group block, libgit2-dev APT package and schema target; took starbase's format/lint structure; set DOCS_VENVDIR=../.venv-docs so docs install into a separate venv outside docs/ (Sphinx must not read the venv)
• docs/conf.py: starbase scaffold with child values (project, author, ogp_*, html_context URLs, GPL-3.0 license, llms_txt_description derived from the docs/index.rst opening sentence); copyright start year 2023
• Docs pages kept with Debcraft substitutions; how-to-guides -> how-to rename with the matching docs/redirects.txt entry; scoped vale ignores for the Starbase mentions in docs/README.md (proper noun, not added to the custom wordlist)
• docs/.custom_wordlist.txt: did NOT add "Starbase" (forbidden); otherwise unchanged

Preparation PRs (all merged before this PR was opened)

• style: format pyproject.toml with tombi #200 style: format pyproject.toml with tombi
• docs: add AGENTS.md for Debcraft #201 docs: add AGENTS.md for Debcraft
• fix: silence ty invalid-assignment for the Debian templater pattern #202 fix: silence ty invalid-assignment for the Debian templater pattern
• build(deps): raise oauthlib constraint floor for OSV findings #204 build(deps): raise oauthlib constraint floor for OSV findings
• docs: reword "PRs" to "pull requests" for Vale spellcheck #205 docs: reword "PRs" to "pull requests" for Vale spellcheck
• build(deps): add dev-stonking and dev-tenacious dependency groups #208 build(deps): add dev-stonking and dev-tenacious dependency groups
• fix(docs): update starflow intersphinx URL #209 fix(docs): update starflow intersphinx URL
• fix: suppress ty override diagnostics in the project model #210 fix: suppress ty override diagnostics in the project model
• build(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.17.1 (main) #211 build(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.17.1

Validation

• make format: all formatters pass
• make lint: ruff, ty, codespell, prettier, shfmt, shellcheck, tombi, sphinx-lint, spelling, woke, linkcheck, twine, uv-lockfile, actionlint all pass
• make docs: build succeeded; redirect confirmed (good) how-to-guides/index.html --> how-to
• make test-fast: 245 passed, 1 skipped

[Copilot]

🟡 Changes recommended

Unresolved moderate documentation, consent, accessibility, and workflow-link issues remain.

10 open issues

• Point tag protection link to Debcraft repository · New
• Restore or remove nonfunctional tracker settings control · New
• Prevent unconditional GTM loading without consent · New
• Remove incorrect aria-current from external product link · New
• Move metadata below explanation anchor · New
• Move metadata below how-to-guides anchor · New
• Move metadata below reference anchor · New
• Use US spelling: summarize · New
• Move metadata below release-notes anchor · New
• Move metadata below tutorials anchor · New

What changed in this PR

Synchronizes Debcraft with Starbase’s Sphinx Stack 2.0 documentation, tooling, workflows, and dependencies.

Changes:

• Migrates documentation tooling, navigation, redirects, and metadata.
• Refreshes CI, linting, release, and security configuration.
• Updates dependencies, templates, and shared development tooling.

File	Summary
uv.lock	Updates locked documentation dependencies.
pyproject.toml	Updates documentation groups and Ruff rules.
osv-scanner.toml	Adds scanner configuration.
Makefile	Updates formatting, linting, and documentation targets.
docs/​tutorials/​index.rst	Adds tutorial metadata; metadata ordering needs correction (moderate, 2 votes).
docs/​requirements.txt	Updates documentation dependencies.
docs/​release-notes/​index.rst	Adds metadata; ordering and US spelling need correction (moderate, 2 and 3 votes).
docs/​reference/​index.rst	Adds reference metadata; metadata ordering needs correction (moderate, 2 votes).
docs/​redirects.txt	Adds the how-to redirect.
docs/​README.md	Documents Sphinx Stack maintenance.
docs/​Makefile	Migrates documentation build tooling.
docs/​index.rst	Updates the documentation landing page; README documentation text also needs updating (moderate, 1 vote).
docs/​how-to/​index.rst	Adds the how-to landing page; metadata ordering needs correction (moderate, 2 votes).
docs/​how-to-guides/​index.rst	Removes the renamed legacy page.
docs/​explanation/​index.rst	Adds explanation metadata; metadata ordering needs correction (moderate, 2 votes).
docs/​explanation/​documentation.rst	Updates the syntax-reference link.
docs/​conf.py	Updates Sphinx configuration; stale module/path references and UK spelling need correction (moderate, 1 vote each).
docs/​.sphinx/​version	Removes the old tooling marker.
docs/​.gitignore	Updates generated-path ignores.
docs/​_templates/​header.html	Adds the documentation header; unconditional GTM loading and incorrect aria-current need correction (moderate, 4 and 2 votes).
docs/​_templates/​footer.html	Adds the footer; tracker-settings control lacks a working consent handler (moderate, 3 votes).
docs/​_static/​js/​bundle.js	Removes the old consent bundle.
docs/​_static/​css/​cookie-banner.css	Removes old cookie-banner styling.
docs/​_dev/​version	Adds Sphinx Stack version metadata.
docs/​_dev/​update_sp.py	Updates the synchronization script.
docs/​_dev/​pa11y.json	Adds accessibility-test configuration.
docs/​_dev/​get_vale_conf.py	Updates Vale configuration paths.
docs/​_dev/​.pymarkdown.json	Adds Markdown lint configuration.
docs/​_dev/​.pre-commit-config.yaml	Adds documentation hooks.
common.mk	Adds shared formatting, linting, and documentation tooling.
.prettierignore	Updates ignored documentation paths.
.pre-commit-config.yaml	Renames the Ruff hook and adds shfmt.
.github/​zizmor.yaml	Configures workflow security settings.
.github/​workflows/​tics.yaml	Updates TICS workflow configuration.
.github/​workflows/​release-publish.yaml	Refreshes release publishing; the tag-protection URL needs repository scoping (moderate, 2 votes).
.github/​workflows/​policy.yaml	Updates policy and security-scan configuration.
.github/​workflows/​copilot-setup-steps.yaml	Adds Copilot environment setup.
.github/​workflows/​check-renovate.yaml	Refreshes Renovate validation tooling.
.github/​actionlint.yaml	Updates runner configuration.
.editorconfig	Adds TOML formatting settings.

_{Review effort: Lite}

[jahn-junior]

Verified the docs build locally, and everything LGTM. A few notes, but nothing that warrants another review from me.

I'll create a private RTD project for Debcraft this week.

[mr-cal]

I know this job was already here, but we should remove it in a separate PR.