🔄 Sync shared files from ws-meta

.vitepress/data/dependencies.yaml

@@ -182,7 +182,7 @@ dependencies:
     license: Apache 2
     package: docker-compose-plugin
     track: false
-    version: 5.0.0
+    version: 5.1.0
 
   docker-py:
     datasource: pypi
@@ -427,7 +427,7 @@ dependencies:
     group: CLI Tools
     home: https://github.com/lsof-org/lsof
     license: BSD 2
-    version: 4.99.4+dfsg-2
+    version: 4.99.4
 
   man:
     cmd: man --version
@@ -469,7 +469,7 @@ dependencies:
     home: https://nodejs.org
     license: MIT
     package: nodejs
-    version: 24.13.0
+    version: 24.14.0
 
   npm:
     cmd: npm --version
@@ -478,7 +478,7 @@ dependencies:
     home: https://github.com/npm/cli
     license: Artistic 2
     package: npm/cli
-    version: 11.8.0
+    version: 11.9.0
 
   oc:
     cmd: oc version

.vitepress/data/env.reference.yaml

@@ -191,49 +191,49 @@ envs:
         type: boolean
         default: false
         since: 0.1.3
-        reference: /editor/claude
+        reference: /tools/claude
         description: Disables the Claude Code statusline.
 
       statusline_hide_context_bar:
         type: boolean
         default: false
         since: 0.1.3
-        reference: /editor/claude
+        reference: /tools/claude
         description: Hides the context usage bar in the Claude statusline.
 
       statusline_hide_git:
         type: boolean
         default: false
         since: 0.1.3
-        reference: /editor/claude
+        reference: /tools/claude
         description: Hides git branch and status in the Claude statusline.
 
       statusline_hide_lines_changed:
         type: boolean
         default: false
         since: 0.1.3
-        reference: /editor/claude
+        reference: /tools/claude
         description: Hides lines added/removed in the Claude statusline.
 
       statusline_hide_model:
         type: boolean
         default: false
         since: 0.1.3
-        reference: /editor/claude
+        reference: /tools/claude
         description: Hides the model name in the Claude statusline.
 
       statusline_script:
         type: string
         default: /etc/claude-code/statusline.zsh
         since: 0.1.3
-        reference: /editor/claude
+        reference: /tools/claude
         description: Path to the statusline script.
 
       statusline_shell:
         type: string
         default: zsh
         since: 0.1.3
-        reference: /editor/claude
+        reference: /tools/claude
         description: Shell used to execute the statusline script.
 
   docker:
@@ -746,11 +746,44 @@ envs:
         type: string
         default: >-
           1password auto-venv docker encode64 fzf-history git
-          golang helm kubectl npm python pip ssh-agent yarn
-          zsh-autosuggestions
+          golang helm kubectl npm python pip safe-history
+          ssh-agent yarn zsh-autosuggestions
         example: kubectl npm python pip
         description: Enables built-in `oh-my-zsh` plugins.
 
+      safe_history_ignore_failed:
+        type: boolean
+        default: true
+        reference: /editor/terminal
+        description: Prevents failed commands from being persisted to history file.
+        longDescription: |
+          When `true`, commands that exit with a non-zero status are kept in the
+          current session's history *(accessible via up-arrow)* but are **not**
+          written to `$HISTFILE`.
+
+          Only successful commands are persisted across sessions.
+
+      safe_history_ignore_secrets:
+        type: boolean
+        default: true
+        reference: /editor/terminal
+        description: Prevents commands containing secrets from entering history.
+        longDescription: |
+          When `true`, commands matching built-in secret patterns
+          *(e.g. `TOKEN=...`, `--password=...`, `Authorization:` headers, `curl -u`)*
+          are blocked entirely, they don't appear in the session history or on disk.
+
+      safe_history_secret_patterns:
+        type: string
+        default: null
+        reference: /editor/terminal
+        description: Additional pipe-delimited regex patterns treated as secrets.
+        longDescription: |
+          Accepts a **pipe-delimited** list of regex patterns appended to the
+          built-in secret patterns. Commands matching any pattern are excluded
+          from history entirely.
+        example: my-corp-token|INTERNAL_KEY=
+
 deprecated:
   WS_APT_UPDATE_REPOS:
     use: WS_APT_UPDATE_CACHE