ci(workflows): reduce Actions noise and flakiness

- commitlint: skip Dependabot/Renovate PRs via actor+branch guards\n- ci: skip vsce packaging and vsix upload on PR events\n- release: guard publish job to tag refs only to avoid stray push runs\n- dependabot-auto-merge: enable auto-merge only if PR state is open

Author: masterkain

.github/workflows/ci.yml

@@ -61,10 +61,11 @@ jobs:
         run: npm run package
 
       - name: Package VSIX (sanity)
+        if: github.event_name != 'pull_request'
         run: npx --yes @vscode/vsce package
 
       - name: Upload VSIX artifact
-        if: always()
+        if: github.event_name != 'pull_request' && always()
         uses: actions/upload-artifact@v4
         with:
           name: vsix

.github/workflows/commitlint.yml

@@ -10,7 +10,12 @@ permissions:
 
 jobs:
   lint:
-    if: github.actor != 'dependabot[bot]'
+    # Skip bot-authored dependency PRs and bot edits to those PRs
+    # Commitlint failures on long Dependabot titles are noisy and non-blocking
+    if: >
+      github.event.pull_request.user.login != 'dependabot[bot]' &&
+      !startsWith(github.head_ref, 'dependabot/') &&
+      !startsWith(github.head_ref, 'renovate/')
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5

.github/workflows/dependabot-auto-merge.yml

@@ -25,9 +25,9 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Enable auto-merge
+        if: github.event.pull_request.state == 'open'
         uses: peter-evans/enable-pull-request-automerge@v3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           pull-request-number: ${{ github.event.pull_request.number }}
           merge-method: squash
-

.github/workflows/release.yml

@@ -19,6 +19,8 @@ env:
 
 jobs:
   publish:
+    # Extra guard to avoid stray runs if GitHub creates a run on branch pushes
+    if: startsWith(github.ref, 'refs/tags/')
     runs-on: ubuntu-latest
     steps:
       - name: Checkout

.serena/.gitignore

@@ -0,0 +1 @@
+/cache

.serena/memories/project_overview.md

@@ -0,0 +1,13 @@
+# AutoPathComment (VS Code Extension)
+
+- Purpose: On each file save, ensure a file-relative path comment is present at the top of the file using the correct single-line comment syntax; supports user overrides per extension.
+- Tech stack: TypeScript, esbuild (CJS bundle), VS Code extension API.
+- Entry: `src/extension.ts` → builds to `dist/extension.js`.
+- Tests: Mocha via `@vscode/test-cli` (integration-style, drives a VS Code instance), located in `src/test/*.test.ts`.
+- Structure:
+  - `src/extension.ts`: activation + logic; exports `getCommentSyntax` for tests.
+  - `src/test/*.test.ts`: tests (compiled to `out/test`).
+  - `dist/extension.js`: built output (generated by `esbuild.js`).
+  - `.github/workflows/`: `ci.yml`, `release.yml`, `release-please.yml`, etc.
+  - `CHANGELOG.md`: maintained by Release Please.
+- Node/VS Code: engines `^1.104.0`, CI uses Node 24.

.serena/memories/release_flow.md

@@ -0,0 +1,10 @@
+# Release Flow
+
+- Managed by Release Please (`.github/workflows/release-please.yml`).
+- On pushes to `main`, Release Please updates/opens a PR (e.g., `chore(main): release 0.0.x`) with version bump + CHANGELOG.
+- Merge the release PR → tag is created automatically (`vX.Y.Z` or `autopathcomment-vX.Y.Z`).
+- Tag triggers `Release` workflow:
+  - Build (`npm run package`) and package VSIX (`vsce package`).
+  - Upload VSIX to GitHub Release (generate notes).
+  - If `VSCE_PAT` secret is configured, `vsce publish` pushes to Marketplace.
+- Manual fallback: `npm version <bump>` + `git push --follow-tags` triggers `Release` workflow but bypasses Release Please PR/CHANGELOG authoring.

.serena/memories/style_and_conventions.md

@@ -0,0 +1,10 @@
+# Style and Conventions
+
+- Language: TypeScript.
+- Linting: ESLint 9 with @typescript-eslint 8; project policy is zero warnings (lint runs with `--max-warnings=0`).
+- ESLint rules emphasized: `curly`, `eqeqeq`, `no-throw-literal`, `semi` (project-level severities may be `warn` but CI enforces zero warnings).
+- Code style: 2-space indent; keep lines focused and readable.
+- Exports: Prefer named exports; avoid default exports.
+- Functions: Small and pure where possible; explicit types where helpful.
+- Commit messages: Conventional Commits required; e.g., `feat: ...`, `fix: ...`, `docs: ...`, `chore: ...`. Include `BREAKING CHANGE:` in body for majors. Dependabot PRs use `fix(deps): bump ...` to trigger patch releases.
+- Release Please: Relies on Conventional Commits to drive version and CHANGELOG.

.serena/memories/suggested_commands.md

@@ -0,0 +1,20 @@
+# Suggested Commands
+
+Development
+- `npm run watch` – parallel watch: esbuild and `tsc --noEmit`.
+- `npm run compile` – typecheck, lint (zero warnings), build dev bundle.
+- `npm run package` – production build for releases.
+
+Quality
+- `npm run check-types` – `tsc --noEmit`.
+- `npm run lint` – `eslint src --max-warnings=0`.
+- `npm test` – run VS Code tests via `@vscode/test-cli`.
+- `npm run check` – typecheck + lint + tests.
+
+VSIX
+- `npx @vscode/vsce package` – create `.vsix` locally.
+- `npx @vscode/vsce publish` – publish (requires `VSCE_PAT`).
+
+Git/Release
+- Normal flow: push Conventional Commits → Release Please PR → merge → tag + release automation.
+- Manual fallback: `npm version <patch|minor|major> && git push --follow-tags` (bypasses Release Please).

.serena/memories/task_completion_checklist.md

@@ -0,0 +1,9 @@
+# Task Completion Checklist
+
+- Run `npm run check-types` (TypeScript typecheck clean).
+- Run `npm run lint` (must be zero warnings/errors).
+- Run `npm test` and ensure all integration tests pass.
+- Ensure commit message follows Conventional Commits (subject ≤ 72 chars; scope optional; no stray escapes like `\n`).
+- If the change warrants a release, let Release Please open its PR; do not tag manually.
+- Verify CI (GitHub Actions) green.
+- For release PRs: skim CHANGELOG/versions, then merge when satisfied.