diff --git a/.github/codeql/desktop-only.yml b/.github/codeql/desktop-only.yml new file mode 100644 index 00000000000..1083e557597 --- /dev/null +++ b/.github/codeql/desktop-only.yml @@ -0,0 +1,3 @@ +name: desktop-only +paths: + - desktop/** diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 41331fd755c..6256fc663cd 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -14,8 +14,12 @@ name: "CodeQL Advanced" on: push: branches: [ "develop", "PR-review", "gh-pages", "main" ] + paths-ignore: + - 'cookiecutter/**' pull_request: branches: [ "develop", "PR-review", "gh-pages", "main" ] + paths-ignore: + - 'cookiecutter/**' schedule: - cron: '37 0 * * 6' @@ -45,16 +49,16 @@ jobs: include: - language: actions build-mode: none + config-file: '' - language: python build-mode: none - # CodeQL supports the following values keywords for 'language': 'actions', 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'rust', 'swift' - # Use `c-cpp` to analyze code written in C, C++ or both - # Use 'java-kotlin' to analyze code written in Java, Kotlin or both - # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both - # To learn more about changing the languages that are analyzed or customizing the build mode for your analysis, - # see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning. - # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how - # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages + config-file: '' + - language: rust + build-mode: none + config-file: .github/codeql/desktop-only.yml + - language: javascript-typescript + build-mode: none + config-file: .github/codeql/desktop-only.yml steps: - name: Checkout repository uses: actions/checkout@v4 @@ -67,10 +71,11 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} + config-file: ${{ matrix.config-file }} # If you wish to specify custom queries, you can do so here or in a config file. # By default, queries listed here will override any specified in a config file. # Prefix the list here with "+" to use these queries and those in the config file. @@ -95,6 +100,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4 with: category: "/language:${{matrix.language}}" \ No newline at end of file diff --git a/desktop/package-lock.json b/desktop/package-lock.json index ddcb5725b07..35c370fed7e 100644 --- a/desktop/package-lock.json +++ b/desktop/package-lock.json @@ -39,7 +39,7 @@ "zod": "^3.25.76" }, "devDependencies": { - "@eslint/js": "^9.31.0", + "@eslint/js": "^9.39.1", "@tanstack/router-vite-plugin": "^1.131.27", "@tauri-apps/api": "^2.8.0", "@tauri-apps/cli": "^2.8.1", @@ -59,8 +59,8 @@ "jsdom": "^26.1.0", "typescript": "^5.9.2", "typescript-eslint": "^8.40.0", - "vite": "^7.1.11", - "vite-plugin-svgr": "^4.3.0", + "vite": "^7.2.2", + "vite-plugin-svgr": "^4.5.0", "vitest": "^3.2.4" } }, @@ -1381,9 +1381,9 @@ } }, "node_modules/@eslint/js": { - "version": "9.37.0", - "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.37.0.tgz", - "integrity": "sha512-jaS+NJ+hximswBG6pjNX0uEJZkrT0zwpVi3BA3vX22aFGjJjmgSTSmPpZCRKmoBL5VY/M6p0xsSJx7rk7sy5gg==", + "version": "9.39.1", + "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.39.1.tgz", + "integrity": "sha512-S26Stp4zCy88tH94QbBv3XCuzRQiZ9yXofEILmglYTh/Ug/a9/umqvgFtYBAo3Lp0nsI/5/qH1CCrbdK3AP1Tw==", "dev": true, "license": "MIT", "engines": { @@ -5980,6 +5980,19 @@ "url": "https://opencollective.com/eslint" } }, + "node_modules/eslint/node_modules/@eslint/js": { + "version": "9.37.0", + "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.37.0.tgz", + "integrity": "sha512-jaS+NJ+hximswBG6pjNX0uEJZkrT0zwpVi3BA3vX22aFGjJjmgSTSmPpZCRKmoBL5VY/M6p0xsSJx7rk7sy5gg==", + "dev": true, + "license": "MIT", + "engines": { + "node": "^18.18.0 || ^20.9.0 || >=21.1.0" + }, + "funding": { + "url": "https://eslint.org/donate" + } + }, "node_modules/eslint/node_modules/brace-expansion": { "version": "1.1.12", "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz", @@ -7326,9 +7339,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "4.1.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz", - "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==", + "version": "4.1.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz", + "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==", "dev": true, "license": "MIT", "dependencies": { @@ -10826,9 +10839,9 @@ } }, "node_modules/vite": { - "version": "7.1.11", - "resolved": "https://registry.npmjs.org/vite/-/vite-7.1.11.tgz", - "integrity": "sha512-uzcxnSDVjAopEUjljkWh8EIrg6tlzrjFUfMcR1EVsRDGwf/ccef0qQPRyOrROwhrTDaApueq+ja+KLPlzR/zdg==", + "version": "7.2.2", + "resolved": "https://registry.npmjs.org/vite/-/vite-7.2.2.tgz", + "integrity": "sha512-BxAKBWmIbrDgrokdGZH1IgkIk/5mMHDreLDmCJ0qpyJaAteP8NvMhkwr/ZCQNqNH97bw/dANTE9PDzqwJghfMQ==", "license": "MIT", "dependencies": { "esbuild": "^0.25.0", diff --git a/desktop/package.json b/desktop/package.json index 6ae0c27801b..f1a73762643 100644 --- a/desktop/package.json +++ b/desktop/package.json @@ -44,7 +44,7 @@ "zod": "^3.25.76" }, "devDependencies": { - "@eslint/js": "^9.31.0", + "@eslint/js": "^9.39.1", "@tanstack/router-vite-plugin": "^1.131.27", "@tauri-apps/api": "^2.8.0", "@tauri-apps/cli": "^2.8.1", @@ -64,8 +64,8 @@ "jsdom": "^26.1.0", "typescript": "^5.9.2", "typescript-eslint": "^8.40.0", - "vite": "^7.1.11", - "vite-plugin-svgr": "^4.3.0", + "vite": "^7.2.2", + "vite-plugin-svgr": "^4.5.0", "vitest": "^3.2.4" } }