Bump the npm_and_yarn group across 2 directories with 33 updates #20

	# CodeQL Security Analysis
	# =========================
	# Automated code scanning for JavaScript/TypeScript vulnerabilities
	# Documentation: https://docs.github.com/en/code-security/code-scanning

	name: CodeQL

	on:

	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	- cron: '0 0 * * 0'
	workflow_dispatch:


	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	analyze:
	name: Analyze JavaScript
	runs-on: ubuntu-latest
	timeout-minutes: 30
	permissions:
	security-events: write
	actions: read
	contents: read

	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	- name: Initialize CodeQL
	uses: github/codeql-action/init@v3
	with:
	languages: javascript-typescript
	queries: security-extended

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v3
	with:
	category: "/language:javascript-typescript"

Provide feedback