Merge pull request #181 from AlvaroDavi5/develop

fix(ci,build,chore,test): updated workflows and dependencies

Author: AlvaroDavi5

.github/workflows/build-application.yml

@@ -0,0 +1,39 @@
+name: Build Application
+
+on:
+  push:
+    branches: [develop]
+  schedule:
+    - cron: "0 0 */7 * *" # runs on every 7th day
+
+jobs:
+  build:
+    name: Application Build
+
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        node-version: [20.x]
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+          ref: ${{ github.head_ref || github.ref }}
+
+      - name: Setup Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v3
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: "npm"
+
+      - name: Installing Dependencies
+        run: npm install --ignore-scripts
+
+      - name: Checking Type
+        run: npm run typecheck
+
+      - name: Building
+        run: npm run build

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,45 @@
+name: Code Quality Analysis
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: ['*']
+
+jobs:
+  codeql_analysis:
+    name: CodeQL Analysis
+
+    runs-on: ubuntu-latest
+
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ["typescript", "javascript"]
+
+    timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+          ref: ${{ github.head_ref || github.ref }}
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Autobuild CodeQL
+        uses: github/codeql-action/autobuild@v3
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:${{matrix.language}}"

.github/workflows/development.yml

@@ -2,18 +2,18 @@ name: Releasing
 
 on:
   push:
-    branches: [release, main]
+    branches: [main, release]
   pull_request:
-    branches: [release, main]
+    branches: [main, release]
 
 env:
   CI: true
   LEFTHOOK: 0
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
 jobs:
-  node_build:
-    name: Node.js Build
+  build_and_test:
+    name: Application Build and Tests
 
     runs-on: ubuntu-latest
 
@@ -52,15 +52,16 @@ jobs:
           name: build
           path: build
 
-      - name: Testing Modules
+      - name: Running Unit Tests
         run: npm run test:unit
-      - name: Testing Integration
+
+      - name: Running Integration Tests
         run: npm run test:integration
 
   semantic_release:
     name: Semantic Versioning Release
 
-    needs: node_build
+    needs: build_and_test
 
     runs-on: ubuntu-latest
 

.github/workflows/releasing.yml

@@ -1,24 +1,21 @@
-name: Testing
+name: SonarQube Analysis
 
 on:
   push:
-    branches: [homolog]
+    branches: [main, homolog]
   pull_request:
-    branches: [homolog]
+    branches: [main, homolog]
 
 permissions:
   contents: read
 
 env:
-  CI: true
-  LEFTHOOK: 0
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
   SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
 
 jobs:
-  node_build:
-    name: Node.js Build
+  generate_coverage:
+    name: Tests Coverage Generation
 
     runs-on: ubuntu-latest
 
@@ -42,18 +39,6 @@ jobs:
       - name: Installing Dependencies
         run: npm install --ignore-scripts
 
-      - name: Checking Dependencies Security
-        run: npm run security-check
-
-      - name: Checking Type
-        run: npm run typecheck
-
-      - name: Building
-        run: npm run build
-
-      - name: Packing
-        run: npm run build:webpack
-
       - name: Testing Modules
         run: npm run test:coverage
 
@@ -64,11 +49,11 @@ jobs:
           path: coverage
 
   sonarqube:
-    name: SonarQube Analyze
+    name: SonarQube Analysis
 
     runs-on: ubuntu-latest
 
-    needs: node_build
+    needs: generate_coverage
 
     steps:
       - name: Download Code Coverage Results
@@ -83,6 +68,9 @@ jobs:
       - name: Preparing Coverage Files
         run: npm run sonar:prepare
 
+      # - name: SonarQube Scan
+      #   run: npm run sonar:scan
+
       - name: SonarQube Scan
         uses: sonarsource/sonarqube-scan-action@master