chore: release v0.17.0

.github/workflows/autofix.yml

@@ -26,7 +26,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           cache: true
@@ -45,4 +45,4 @@ jobs:
           - name: 🔠 Fix lint errors
             run: vp run lint:fix
 
-      - uses: autofix-ci/action@635ffb0c9798bd160680f18fd73371e355b85f27 # v1.3.2
+      - uses: autofix-ci/action@c5b2d67aa2274e7b5a18224e8171550871fc7e4a # v1.3.4

.github/workflows/chromatic.yml

@@ -27,14 +27,14 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
           persist-credentials: false
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           cache: true
           sfw: true
 
       - name: 🧪 Run Chromatic Visual and Accessibility Tests
-        uses: chromaui/action@7804f34e4e59c0d9b3c856848f46ad96d7897429 # v17.5.0
+        uses: chromaui/action@94713c544284a14195de3b50ef24301579f1877e # v18.0.1
         with:
           buildCommand: vp run build-storybook
           outputDir: storybook-static

.github/workflows/ci.yml

@@ -30,7 +30,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           sfw: true
@@ -50,7 +50,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           cache: true
@@ -68,7 +68,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           cache: true
@@ -107,7 +107,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           cache: true
@@ -144,7 +144,7 @@ jobs:
     name: 🖥️ Browser tests
     runs-on: ubuntu-24.04-arm
     container:
-      image: mcr.microsoft.com/playwright:v1.60.0-noble@sha256:9bd26ad900bb5e0f4dee75839e957a89ae89c2b7ab1e76050e559790e946b948
+      image: mcr.microsoft.com/playwright:v1.61.1-noble@sha256:5b8f294aff9041b7191c34a4bab3ac270157a28774d4b0660e9743297b697e48
 
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
@@ -154,7 +154,7 @@ jobs:
       - name: 👑 Fix Git ownership
         run: git config --global --add safe.directory /__w/npmx.dev/npmx.dev
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           cache: true
@@ -192,7 +192,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           cache: true
@@ -216,7 +216,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           cache: true
@@ -234,7 +234,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           sfw: true

.github/workflows/dependency-diff-comment.yml

@@ -30,7 +30,7 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: 💬 Post comment
-        uses: e18e/action-dependency-diff@f825d5b5c5ce0a42dc46c47ec20de24460affcd8 # v1.5.0
+        uses: e18e/action-dependency-diff@8e9b8c1957ab066d36235a43f4c1ff1522e1bdbc # v1.6.1
         with:
           mode: comment-from-artifact
           artifact-path: e18e-diff-result.json

.github/workflows/dependency-diff.yml

@@ -32,7 +32,7 @@ jobs:
 
       - name: 🔎 Compare dependencies
         id: analyze
-        uses: e18e/action-dependency-diff@f825d5b5c5ce0a42dc46c47ec20de24460affcd8 # v1.5.0
+        uses: e18e/action-dependency-diff@8e9b8c1957ab066d36235a43f4c1ff1522e1bdbc # v1.6.1
         with:
           mode: artifact
           detect-replacements: 'true'

.github/workflows/deploy-canary.yml

@@ -22,7 +22,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 2
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           run-install: false

.github/workflows/lunaria.yml

@@ -29,7 +29,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           cache: true

.github/workflows/release-pr.yml

@@ -26,7 +26,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           run-install: false

.github/workflows/release-tag.yml

@@ -28,7 +28,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: true
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           run-install: false
@@ -66,7 +66,7 @@ jobs:
 
       - name: 📦 Install dependencies
         if: steps.check.outputs.skip == 'false'
-        uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+        uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           sfw: true
           run-install: |
@@ -105,14 +105,14 @@ jobs:
           ref: release
           persist-credentials: false
 
-      - uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+      - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           node-version: lts/*
           registry-url: https://registry.npmjs.org
           run-install: false
 
       - name: 📦 Install dependencies
-        uses: voidzero-dev/setup-vp@2dec1e33f4ab2c6d5bce1b0c4607961bb1a3f7a1 # v1.12.0
+        uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
         with:
           sfw: true
           run-install: |

.github/workflows/stale.yml

@@ -19,7 +19,7 @@ jobs:
     permissions:
       issues: write # mark and close stale bug issues
     steps:
-      - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
+      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
         with:
           days-before-issue-stale: 30
           days-before-issue-close: 7
@@ -37,7 +37,7 @@ jobs:
     permissions:
       pull-requests: write # mark and close stale pull requests
     steps:
-      - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
+      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
         with:
           days-before-issue-stale: -1
           days-before-issue-close: -1

.github/workflows/zizmor.yml

@@ -30,7 +30,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
+      - uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
         with:
           persona: pedantic
           # Use annotations instead of SARIF as this doesn't need special permissions

app/components/AppFooter.vue

@@ -272,6 +272,10 @@ const footerSections = computed<Array<{ label: string; links: FooterLink[] }>>((
           <kbd class="kbd">c</kbd>
           <span>{{ $t('shortcuts.compare_from_package') }}</span>
         </li>
+        <li class="flex gap-2 items-center">
+          <kbd class="kbd">-</kbd>
+          <span>{{ $t('shortcuts.changelog') }}</span>
+        </li>
       </ul>
       <p class="text-fg-muted leading-relaxed">
         <i18n-t keypath="shortcuts.disable_shortcuts" tag="span" scope="global">

app/components/Code/DirectoryListing.vue

@@ -2,6 +2,7 @@
 import type { RouteLocationRaw } from 'vue-router'
 import type { RouteNamedMap } from 'vue-router/auto-routes'
 import { ADDITIONAL_ICONS, getFileIcon } from '~/utils/file-icons'
+import { isPossiblyUnnecessaryContent } from '~/utils/package-content-hints'
 
 const props = defineProps<{
   tree: PackageFileTree[]
@@ -10,6 +11,8 @@ const props = defineProps<{
   baseRoute: Pick<RouteNamedMap['code'], 'params'>
 }>()
 
+const { t } = useI18n()
+
 // Get the current directory's contents
 const currentContents = computed(() => {
   if (!props.currentPath) {
@@ -103,6 +106,11 @@ const bytesFormatter = useBytesFormatter()
           <td colspan="2">
             <LinkBase
               :to="getCodeRoute(node.path)"
+              :aria-label="
+                isPossiblyUnnecessaryContent(node.name, node.type)
+                  ? `${node.name} - ${t('code.possibly_unnecessary')}`
+                  : undefined
+              "
               class="py-2 px-4 font-mono text-sm w-full"
               no-underline
             >
@@ -117,7 +125,21 @@ const bytesFormatter = useBytesFormatter()
                 />
               </svg>
               <span class="w-full flex justify-self-stretch items-center gap-2">
-                <span class="flex-1">{{ node.name }}</span>
+                <span
+                  class="flex-1"
+                  :class="
+                    isPossiblyUnnecessaryContent(node.name, node.type)
+                      ? 'text-yellow-600 dark:text-yellow-400'
+                      : undefined
+                  "
+                  >{{ node.name }}</span
+                >
+                <span
+                  v-if="isPossiblyUnnecessaryContent(node.name, node.type)"
+                  class="i-lucide:info size-[0.85em] shrink-0 text-amber-600 dark:text-amber-400"
+                  aria-hidden="true"
+                  :title="t('code.possibly_unnecessary')"
+                />
                 <span v-if="typeof node.size === 'number'" class="text-end text-xs text-fg-subtle">
                   {{ bytesFormatter.format(node.size) }}
                 </span>

app/components/Code/FileTree.vue

@@ -2,6 +2,7 @@
 import type { RouteLocationRaw } from 'vue-router'
 import type { RouteNamedMap } from 'vue-router/auto-routes'
 import { ADDITIONAL_ICONS, getFileIcon } from '~/utils/file-icons'
+import { isPossiblyUnnecessaryContent } from '~/utils/package-content-hints'
 
 const props = defineProps<{
   tree: PackageFileTree[]
@@ -12,6 +13,7 @@ const props = defineProps<{
 }>()
 
 const depth = computed(() => props.depth ?? 0)
+const treeRoot = useTemplateRef('treeRoot')
 
 // Check if a node or any of its children is currently selected
 function isNodeActive(node: PackageFileTree): boolean {
@@ -35,27 +37,38 @@ function getFileRoute(nodePath: string): RouteLocationRaw {
 
 const { toggleDir, isExpanded, autoExpandAncestors } = useFileTreeState(props.baseUrl)
 
+const scrollIntoView = () => {
+  const el = treeRoot.value?.querySelector<HTMLElement>('[aria-current="true"]')
+  el?.scrollIntoView({ block: 'center', behavior: 'smooth' })
+}
+
 // Auto-expand directories in the current path
 watch(
   () => props.currentPath,
   path => {
     if (depth.value === 0 && path) {
       autoExpandAncestors(path)
+      nextTick(scrollIntoView)
     }
   },
   { immediate: true },
 )
 </script>
 
 <template>
-  <ul class="list-none m-0 p-0" :class="depth === 0 ? 'py-2' : ''">
+  <ul ref="treeRoot" class="list-none m-0 p-0" :class="depth === 0 ? 'py-2' : ''">
     <li v-for="node in tree" :key="node.path">
       <!-- Directory -->
       <template v-if="node.type === 'directory'">
         <ButtonBase
           class="w-full justify-start! rounded-none! border-none! transition-[color,background-color]! duration-100!"
           block
           :aria-pressed="isNodeActive(node)"
+          :aria-label="
+            isPossiblyUnnecessaryContent(node.name, 'directory')
+              ? `${node.name} - ${$t('code.possibly_unnecessary')}`
+              : undefined
+          "
           :style="{ paddingLeft: `${depth * 12 + 12}px` }"
           @click="toggleDir(node.path)"
           :classicon="isExpanded(node.path) ? 'i-lucide:chevron-down' : 'i-lucide:chevron-right'"
@@ -70,7 +83,21 @@ watch(
               :href="`/file-tree-sprite.svg#${isExpanded(node.path) ? ADDITIONAL_ICONS['folder-open'] : ADDITIONAL_ICONS['folder']}`"
             />
           </svg>
-          <span class="truncate">{{ node.name }}</span>
+          <span
+            class="truncate"
+            :class="
+              isPossiblyUnnecessaryContent(node.name, 'directory')
+                ? 'text-yellow-600 dark:text-yellow-400'
+                : undefined
+            "
+            >{{ node.name }}</span
+          >
+          <span
+            v-if="isPossiblyUnnecessaryContent(node.name, 'directory')"
+            class="i-lucide:info size-[0.85em] ms-1 shrink-0 text-amber-600 dark:text-amber-400"
+            aria-hidden="true"
+            :title="$t('code.possibly_unnecessary')"
+          />
         </ButtonBase>
         <CodeFileTree
           v-if="isExpanded(node.path) && node.children"
@@ -88,14 +115,33 @@ watch(
           variant="button-secondary"
           :to="getFileRoute(node.path)"
           :aria-current="currentPath === node.path"
+          :aria-label="
+            isPossiblyUnnecessaryContent(node.name, 'file')
+              ? `${node.name} - ${$t('code.possibly_unnecessary')}`
+              : undefined
+          "
           class="w-full justify-start! rounded-none! border-none! transition-[color,background-color]! duration-100!"
           block
           :style="{ paddingLeft: `${depth * 12 + 32}px` }"
         >
           <svg class="size-[1em] me-1 shrink-0" viewBox="0 0 16 16" aria-hidden="true">
             <use :href="`/file-tree-sprite.svg#${getFileIcon(node.name)}`" />
           </svg>
-          <span class="truncate">{{ node.name }}</span>
+          <span
+            class="truncate"
+            :class="
+              isPossiblyUnnecessaryContent(node.name, 'file')
+                ? 'text-yellow-600 dark:text-yellow-400'
+                : undefined
+            "
+            >{{ node.name }}</span
+          >
+          <span
+            v-if="isPossiblyUnnecessaryContent(node.name, 'file')"
+            class="i-lucide:info size-[0.85em] ms-1 shrink-0 text-amber-600 dark:text-amber-400"
+            aria-hidden="true"
+            :title="$t('code.possibly_unnecessary')"
+          />
         </LinkBase>
       </template>
     </li>