chore: sync license, version, dependabot and cleanup checklist

.editorconfig

@@ -11,12 +11,6 @@ indent_size = 2
 [*.{py,pyw}]
 indent_size = 4
 
-[*.{go,mod,sum}]
-indent_style = tab
-
-[Makefile]
-indent_style = tab
-
 [*.{md,markdown}]
 trim_trailing_whitespace = false
 

.github/dependabot.yml

@@ -27,8 +27,19 @@ updates:
       production:
         dependency-type: "production"
 
+  - package-ecosystem: "npm"
+    directory: "/relay"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+      - "npm"
+    commit-message:
+      prefix: "deps"
+
   - package-ecosystem: "pip"
-    directory: "/"
+    directory: "/backend"
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 10
@@ -39,7 +50,7 @@ updates:
       prefix: "deps"
 
   - package-ecosystem: "docker"
-    directory: "/"
+    directory: "/relay"
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5

README.zh-CN.md

@@ -251,7 +251,7 @@ Issue 和 PR 请提在 GitHub。GitCode 镜像会同步推送，但不跑 CI。
 
 ## License
 
-MIT，见 [LICENSE](LICENSE)。
+CNCL，见 [LICENSE](LICENSE)。
 
 ---
 

VERSION

@@ -1 +1 @@
-0.0.1
+1.2.0

backend/docs/openapi.json

@@ -8,8 +8,8 @@
       "email": "security@ms33834.dev"
     },
     "license": {
-      "name": "MIT",
-      "url": "https://opensource.org/license/mit"
+      "name": "CNCL-1.0",
+      "url": "https://github.com/MS33834/taskflow/blob/main/LICENSE"
     },
     "version": "0.1.0"
   },

backend/pyproject.toml

@@ -6,6 +6,7 @@ build-backend = "setuptools.build_meta"
 name = "taskflow-backend"
 version = "0.1.0"
 description = "TaskFlow backend service with plugin system"
+license = { text = "CNCL-1.0" }
 requires-python = ">=3.11"
 dependencies = [
     "fastapi>=0.109.1",

docs/DEVELOPER_CHECKLIST.md

@@ -77,3 +77,15 @@ Before merging:
 - [ ] No deprecation warnings from dependencies
 - [ ] No security scan warnings (CodeQL, gitleaks)
 - [ ] CI pipeline is fully green (not just passing with warnings)
+
+## Codebase Cleanup Check
+
+Periodically audit the repository for structural hygiene:
+
+- [ ] No empty directories (except those with `.gitkeep`)
+- [ ] No duplicate files (e.g. same asset in multiple locations)
+- [ ] No obsolete / orphaned files (e.g. old frontend copies after migration)
+- [ ] VERSION file matches `package.json`, `app.json`, and documentation badges
+- [ ] LICENSE file matches `package.json`, `pyproject.toml`, and README badges
+- [ ] `.editorconfig` only contains language configs actually used in the project
+- [ ] No misplaced files (e.g. app entry points at wrong directory level)

package.json

@@ -1,6 +1,7 @@
 {
   "name": "taskflow",
-  "version": "0.0.1",
+  "version": "1.2.0",
+  "license": "CNCL-1.0",
   "description": "Cross-platform (Web / Android / iOS) task manager built on React Native + Expo. TypeScript, Zustand, AsyncStorage.",
   "main": "node_modules/expo/AppEntry.js",
   "scripts": {
@@ -40,7 +41,7 @@
     "name": "badhope",
     "url": "https://github.com/badhope"
   },
-  "license": "MIT",
+  "license": "CNCL-1.0",
   "homepage": "https://github.com/MS33834/taskflow#readme",
   "repository": {
     "type": "git",