Merge pull request #49 from morficus/holiday-updates-legacy

Some minor holiday updates
- addressing all dependbot security warnings
- adding a GH action to run unit tests
- adding a `CODEOWNERS` and PR template file
- adding a `.nvm` file

Author: morficus

.github/CODEOWNERS

@@ -0,0 +1,5 @@
+# Ths file defines individuals or teams that are responsible for code in a repository.
+# Code owners are automatically requested for review when someone opens a pull request that modifies code that they own.
+# Reference: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+
+*       @morficus

.github/pull_request_template.md

@@ -0,0 +1,34 @@
+# Description of changes
+
+<!--
+Please fill out this section with a description of your changes and your approach to this ticket. Please make sure to include things such as:
+* A high-level description of your changes
+* Why did you take the approach that you took?
+* Are there any edge cases the reviewer should be aware of?
+* Are there any known limitations that will be addressed with a future change?
+-->
+
+_fill me out 📝_
+
+## How to test/verify these changes
+
+<!--
+Replace the sample steps below with steps on how a reviewer of this PR can test your changes. This should include things such as (if applicable):
+* Do you need to use a specific account to log in?
+* Is there a particular patient profile that should be used?
+-->
+
+1. Clone this branch and run: `npm run cypress`
+1. Next, do thing 1
+1. Now do thing 2
+1. Notice that XYZ has changed
+
+
+## Screenshots and/or video
+
+<!--
+If relevant, make sure to include relevant video or before/after screenshots  that demonstrate the changes.
+If no visuals are required, then please fill out this section with "N/A"
+-->
+
+_fill me out 📸_

.github/workflows/pr-quality-checks.yml

@@ -0,0 +1,62 @@
+# Run a number of quality checks ever time a PR is opened
+name: Pull Request Quality Checks
+
+on:
+  workflow_dispatch:
+    inputs:
+      name:
+        description: 'Reason for manual trigger'
+        required: true
+        default: 'Re-run past failed build'
+
+  pull_request:
+    types: [opened, synchronize]
+
+jobs:
+  setup:
+    runs-on: ubuntu-latest
+
+    steps:
+      # ref: https://github.com/marketplace/actions/checkout
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      # ref: https://github.com/marketplace/actions/setup-node-js-environment
+      - name: Install NodeJS
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Install dependencies
+        run: npm ci --ignore-scripts
+        env:
+          CI: true
+
+      # we need to cache these dependencies so it can be used in the parallel jobs below
+      - name: Cache dependencies
+        uses: actions/cache@v4
+        with:
+          path: |
+            ./*
+            ~/.npm
+          key: ${{ github.sha }}
+
+  unit-testing:
+    name: Unit testing
+    runs-on: ubuntu-latest
+    needs: setup
+    steps:
+      # restore dependencies that were installed in the `setup` job
+      - name: Restore dependencies
+        uses: actions/cache@v3
+        with:
+          path: |
+            ./*
+            ~/.npm
+          key: ${{ github.sha }}
+
+      - name: Testing
+        run: npm test
+        env:
+          CI: true
+          NODE_ENV: test

.nvmrc

@@ -0,0 +1 @@
+20