build(deps-dev): bump rulesync from 25.0.0 to 26.0.0 - #315

Sourced from rulesync's releases.

v26.0.0

What's Changed

⚠️ Behavior changes

• Permissions import: rulesync import now merges imported permissions into the existing canonical permissions file per category instead of replacing it (#3273)
• OpenCode: rulesync write permission rules are folded into OpenCode's edit permission (#3282)
• Claude Code: a project-scope defaultMode of auto or bypassPermissions is now skipped with a warning (#3278)
• Antigravity: CLI project rules now carry trigger frontmatter (#3276)
• Qwen Code: project import also reads servers from the project .mcp.json, beneath .qwen/settings.json (#3285)

New tools and targets

• feat: add vibe-plugin packaging target for Vibe Code Agent Plugins (#3270)
• feat: add devin-plugin packaging target (#3274)
• feat: add warpcli target for the standalone Warp Agent CLI (#3280)
• feat(kimi-code): add the kimi-code-plugin packaging target (#3287)

Features

• feat(codebuddy): add MCP, hooks and permissions support for CodeBuddy Code (#3271)
• feat: add Qoder hooks, permissions and ignore support (#3272)
• feat: merge imported permissions into the canonical file per category (#3273)
• feat: add Qwen Code checks, MCP allow/deny lists and by-product gitignore entries (#3275)
• feat: follow Claude Code model-switch hooks, project-scope defaultMode and newly scoped settings keys (#3278)
• feat(opencode): map session-deleted, slash-command and model-request hooks; fold write permissions into edit (#3282)
• feat(generate): emit a versioned mutation plan with --json (#3283)
• feat(qwencode): import servers from the project .mcp.json beneath settings.json (#3285)
• feat(generate): add explicit --retire-targets to remove a dropped tool's outputs (#3286)
• feat(grokcli): write ignore patterns as a rulesync sandbox profile deny list (#3291)

Fixes

• fix(antigravity): trigger frontmatter for CLI project rules, skill disable-slash-command/metadata passthrough (#3276)
• fix(reasonix): keep hook cwd/env, emit REASONIX.local.md, import subagents into the project (#3279)

Docs and chores

• chore(deps): bump the all-dependencies group with 120 updates (#3269)
• ci(deps): bump the all-actions group with 3 updates (#3268)
• ci(deps): bump flatt-security/shisho-cloud-action from 1.1.0 to 1.2.0 (#3267)
• chore: update Homebrew formula to v25.0.0 (#3266)

Contributors

• @​dyoshikawa

Full Changelog: dyoshikawa/rulesync@v25.0.0...v26.0.0

• 9d99724 Merge pull request #3292 from dyoshikawa/release/v26.0.0
• 755a961 chore: bump package version to 26.0.0
• a54f527 chore: bump version to 26.0.0
• a00346a Merge pull request #3291 from dyoshikawa/resolve-issue-2498-grok-followups
• 281c118 Merge origin/main into resolve-issue-2498-grok-followups
• 6e9fe7a docs(ignore): qualify Grok exact-directory deny coverage
• eb6a6a0 Merge pull request #3287 from dyoshikawa/resolve-issue-2502-kimi-plugin
• 60a9551 fix(ignore): cover directory contents and mirror Grok's deny-glob validation
• 912ad8f feat(grokcli): write ignore patterns as a rulesync sandbox profile deny list
• bf11356 Merge origin/main into resolve-issue-2502-kimi-plugin
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)