chore(deps): refresh dev toolchain + CI (v3.0.9)

[vib795]

Summary

Consolidates the four open Dependabot PRs into one signed release. All dev/CI scope — the shipped runtime (simple-git, @octokit/rest) is unchanged. Supersedes #40, #41, #42, #43.

PR	Bump	Scope
#41	@types/node ^25.9.3 → ^26.0.1	devDependency (types)
#42	@typescript-eslint/{eslint-plugin,parser} ^8.61.1 → ^8.62.0	devDependency (eslint group)
#43	@vscode/test-cli ^0.0.12 → ^0.0.15	devDependency
#40	actions/checkout v6 → v7	CI workflows

Merged together rather than individually because #41–#43 all touch package.json/package-lock.json and would conflict if merged sequentially.

Verification

• npm audit: 0 vulnerabilities (full and --omit=dev)
• typecheck / lint / 18 tests / esbuild bundle: pass
• No runtime dependency changes

Bumps version to 3.0.9 and adds the README "What's new" entry.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated the app to version 3.0.9.
  • Refreshed development and testing tools to newer versions.
  • Upgraded the CI and release workflows to use a newer checkout action.
• Documentation
  • Added a new v3.0.9 entry to the release notes, including the latest maintenance status.

[coderabbitai]

Caution

Review failed

Pull request was closed or merged during review

📝 Walkthrough

Walkthrough

The PR bumps the package version to 3.0.9, refreshes several dev tool dependencies, adds a 3.0.9 release note in the README, and updates checkout steps in the auto-tag, CI, and release workflows to v7.

Changes

Release metadata and CI action upgrades

Layer / File(s)	Summary
Package version and toolchain refresh package.json, README.md	The package version moves to 3.0.9, devDependencies for Node, TypeScript ESLint, and VS Code test tooling are updated, and the README adds the v3.0.9 entry.
Workflow checkout bumps .github/workflows/auto-tag.yml, .github/workflows/ci.yml, .github/workflows/release.yml	The auto-tag, CI, and release workflows change their checkout step from actions/checkout@v6 to actions/checkout@v7.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• vib795/flaunt-github#27: Also bumps the extension version in package.json.
• vib795/flaunt-github#33: Also updates package.json devDependencies, including @types/node and @typescript-eslint/*.
• vib795/flaunt-github#37: Also updates the README release notes and shared TypeScript tooling dependencies.

Poem

I hopped to v3.0.9 with a twitchy nose,
and tagged-up builds in tidy rows.
Checkout leapt with a jaunty cheer,
while the README whispered, “new notes here.” 🐰

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main changes: dev dependency refresh, CI checkout update, and version bump to v3.0.9.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/deps-3.0.9

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}