Merge remote-tracking branch 'origin/main' into hover-text-copy

Author: Deepak-Gnanasekar

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,36 @@
+name: CodeQL
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["main"]
+  schedule:
+    - cron: "0 6 * * 1" # Weekly Monday 6am UTC
+
+jobs:
+  analyze:
+    name: Analyze (${{ matrix.language }})
+    runs-on: ubuntu-latest
+    if: "! github.event.pull_request.draft"
+    concurrency:
+      group: ${{ github.repository }}-${{ github.head_ref || github.sha }}-${{ github.workflow }}-${{ matrix.language }}
+      cancel-in-progress: true
+    permissions:
+      security-events: write
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [python, javascript]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3

.github/workflows/frontend-lint.yaml

@@ -28,7 +28,7 @@ jobs:
 
       - name: Install dependencies
         working-directory: ./frontend
-        run: npm ci
+        run: npm install
 
       - name: Run ESLint
         working-directory: ./frontend

.github/workflows/frontend-tests.yaml

@@ -4,17 +4,23 @@ on:
   workflow_dispatch:
   push:
     branches: ["main"]
+    paths:
+      - "frontend/**"
   pull_request:
     branches: ["main"]
+    paths:
+      - "frontend/**"
 
 concurrency:
-    group: ${{ github.repository }}-${{ github.head_ref || github.sha }}-${{ github.workflow }}
-    cancel-in-progress: true
+  group: ${{ github.repository }}-${{ github.head_ref || github.sha }}-${{ github.workflow }}
+  cancel-in-progress: true
+
 env:
-    FORCE_COLOR: "1"
+  FORCE_COLOR: "1"
+
 jobs:
   frontend_tests:
-    if: '! github.event.pull_request.draft'
+    if: "! github.event.pull_request.draft"
     runs-on: ubuntu-latest
     name: Frontend Tests
     strategy:
@@ -23,34 +29,30 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4
+
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
-      - name: Cache node modules
-        id: cache-npm
-        uses: actions/cache@v4
-        env:
-          cache-name: cache-node-modules
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('**/frontend/package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-build-${{ env.cache-name }}-
-            ${{ runner.os }}-build-
-            ${{ runner.os }}-
+          cache: "npm"
+          cache-dependency-path: frontend/package-lock.json
+
       - name: Install dependencies
         working-directory: ./frontend
-        run: npm ci
+        run: npm install
+
       - name: Run tests with coverage
         working-directory: ./frontend
         run: CI=true npm run test -- --coverage .
+
       - name: Git fetch unshallow
-        run: |
-          git fetch --unshallow
+        if: ${{ github.actor != 'dependabot[bot]' }}
+        run: git fetch --unshallow
+
       - name: UI SonarCloud Scan
-        uses: SonarSource/sonarcloud-github-action@master
+        uses: SonarSource/sonarcloud-github-action@v3
         if: ${{ github.actor != 'dependabot[bot]' }}
+        continue-on-error: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}