Repository navigation

chore: update npm-non-major - autoclosed #244

	name: CodeQL

	on:
	push:
	branches: [main, development, nightly, 'feature/**']
	pull_request:
	branches: [main, development, nightly]
	schedule:
	- cron: '30 3 * * 1' # Mondays ~03:30 UTC, off the top of the hour
	workflow_dispatch:

	concurrency:
	# PRs: cancel the scan for superseded commits on the same PR (the old
	# code no longer matters). Pushes: key on the commit SHA, not the branch
	# name — otherwise a second push to the same branch before CodeQL
	# finishes cancels the first commit's scan and leaves it with a
	# permanently cancelled/red check instead of a result.
	group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref \|\| github.sha }}
	cancel-in-progress: true

	permissions:
	contents: read
	security-events: write

	jobs:
	analyze:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	security-events: write
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7

	- uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
	with:
	languages: javascript-typescript
	queries: security-and-quality

	- uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
	with:
	category: /language:javascript-typescript