Update GitHub Actions and linting configurations

.github/workflows/labels.yml

@@ -24,6 +24,6 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Sync labels
-        uses: kjanat/github-labelmanager@v1
+        uses: kjanat/github-labelmanager@v2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/mkdocs.yml

@@ -69,4 +69,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

.github/workflows/pr-test-comment.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Create or update PR comment
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const { owner, repo } = context.repo;

.github/workflows/publish.yml

@@ -53,7 +53,7 @@ jobs:
         run: uv build --no-sources
 
       - name: Upload build artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: dist
           path: dist/
@@ -71,13 +71,13 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Download build artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: dist
           path: dist/
 
       - name: Generate attestations
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: dist/*
 

ruff.toml

@@ -86,6 +86,7 @@ ignore = [
   "D203",  # 1 blank line required before class docstring (conflicts with D211)
   "D213",  # Multi-line docstring summary second line
   "D413",  # Missing blank line after last section of docstring
+  "PLW0717",  # too-many-try-statements - psutil guard blocks need a broad try
   "PTH123",  # builtin open() - simpler for some cases
   "S101",  # assert OK - not security-critical CLI tool
   "S404",  # subprocess import - legitimate use

src/procclean/cli/docs.py

@@ -150,8 +150,12 @@ def _extract_h2_sections(
     h2_starts: list[tuple[str, int]] = []
     for i, token in enumerate(tokens):
         if token.type == "heading_open" and token.tag == "h2":
+            # heading_open tokens always carry a source map; skip if absent
+            # rather than defaulting to 0, which would collapse section ranges.
+            if token.map is None:
+                continue
             title = tokens[i + 1].content
-            start_line = token.map[0]  # type: ignore[index]
+            start_line = token.map[0]
             h2_starts.append((title, start_line))
 
     h2_sections: list[tuple[str, int, int]] = []

ty.toml

@@ -14,7 +14,6 @@ error-on-warning = false
 # Strict type checking - all available rules configured
 # Error-level rules (will fail CI)
 ambiguous-protocol-member = "error"
-byte-string-type-annotation = "error"
 call-non-callable = "error"
 call-top-callable = "error"
 conflicting-argument-forms = "error"
@@ -25,7 +24,6 @@ cyclic-type-alias-definition = "error"
 duplicate-base = "error"
 duplicate-kw-only = "error"
 escape-character-in-forward-annotation = "error"
-fstring-type-annotation = "error"
 implicit-concatenated-string-type-annotation = "error"
 inconsistent-mro = "error"
 index-out-of-bounds = "error"