feat(workflow): review and cleanup all CI/CD process

.github/dependabot.yml

@@ -7,7 +7,6 @@ updates:
     open-pull-requests-limit: 20
     reviewers:
       - AliMD
-      - njfamirm
     schedule:
       interval: daily
     labels:
@@ -21,7 +20,6 @@ updates:
     open-pull-requests-limit: 20
     reviewers:
       - AliMD
-      - njfamirm
     schedule:
       interval: daily
     labels:

.github/workflows/lint.yaml → .github/workflows/build-lint.yaml

@@ -1,6 +1,6 @@
 # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
 
-name: Lint
+name: Build & Lint
 
 on:
   workflow_dispatch:
@@ -9,9 +9,8 @@ on:
 
   push:
     branches:
-      - next*
+      - next
       - main
-      - release/*
 
   schedule:
     - cron: '0 7 * * 4'
@@ -24,17 +23,15 @@ on:
     #        └───────────── minute (0 - 59)
 
 env:
-  NODE_VERSION: latest
+  NODE_VERSION: lts/*
 
 jobs:
-  lint-ts:
-    name: ESLint Scanning
+  build-list-ts:
+    name: Build Typescript
     runs-on: ubuntu-latest
 
     permissions:
-      actions: read
       contents: read
-      security-events: write
 
     steps:
       - name: ⤵️ Checkout repository
@@ -49,14 +46,11 @@ jobs:
       - name: 🏗 Install dependencies
         run: yarn install --frozen-lockfile
 
+      - name: 🚀 Build Typescript
+        run: yarn build
+
+      - name: 🚀 Extra Packages Build
+        run: yarn lerna run build
+
       - name: 🚀 Run ESLint
         run: yarn lint:ts
-          --format @microsoft/eslint-formatter-sarif
-          --output-file eslint-results.sarif
-        continue-on-error: true
-
-      - name: 🏗 Upload analysis results to GitHub
-        uses: github/codeql-action/upload-sarif@v2.3.6
-        with:
-          sarif_file: eslint-results.sarif
-          wait-for-processing: true

.github/workflows/codeql.yaml

@@ -5,26 +5,15 @@ name: CodeQL
 on:
   workflow_dispatch:
 
-  pull_request:
-    paths:
-      - '**.ts'
-      - '**.js'
-
   push:
-    paths:
-      - '**.ts'
-      - '**.js'
     branches:
-      - next*
       - main
-      - release/*
 
   schedule:
-    - cron: '0 7 * * 1'
-    #        * * * * *
-    #        │ │ │ │ │
-    #        │ │ │ │ └───── day of the week (0 - 6 or SUN-SAT)
-    #        │ │ │ └─────── month (1 - 12 or JAN-DEC)
+    - cron: '0 7 * */2 *'
+    #        │ │ │  │  │
+    #        │ │ │  │  └─── day of the week (0 - 6 or SUN-SAT)
+    #        │ │ │  └────── month (1 - 12 or JAN-DEC)
     #        │ │ └───────── day of the month (1 - 31)
     #        │ └─────────── hour (0 - 23)
     #        └───────────── minute (0 - 59)

.github/workflows/dependency-review.yaml

@@ -3,7 +3,11 @@
 name: Dependency Review
 
 on:
-  pull_request:
+  workflow_dispatch:
+
+  push:
+    branches:
+      - next
 
 jobs:
   dependency-review:

.github/workflows/publish-alwatr-container.yml

@@ -11,7 +11,6 @@ on:
     branches:
       - next
       - main
-      - v2
 
   pull_request:
     paths:

.github/workflows/publish-npm.yml

@@ -14,7 +14,7 @@ on:
       - 'v*.*.*'
 
 env:
-  NODE_VERSION: latest
+  NODE_VERSION: lts/*
 
 jobs:
   publish-npm:

.github/workflows/publish-special-container.yml

@@ -14,7 +14,6 @@ on:
     branches:
       - next
       - main
-      - v2
 
   pull_request:
     paths:

cloud/container/alwatr-pwa.dockerfile

@@ -1,4 +1,4 @@
-ARG NODE_VERSION=19
+ARG NODE_VERSION=20
 ARG ALWATR_NGINX_VERSION=1.7.0-1.24-alpine
 
 FROM docker.io/library/node:${NODE_VERSION}-alpine as builder

cloud/container/alwatr-services.dockerfile

@@ -1,4 +1,4 @@
-ARG NODE_VERSION=19
+ARG NODE_VERSION=20
 
 FROM docker.io/library/node:${NODE_VERSION}-alpine as builder
 

services/telegram-notifier/Dockerfile

@@ -1,4 +1,4 @@
-ARG NODE_VERSION=19
+ARG NODE_VERSION=20
 FROM docker.io/library/node:${NODE_VERSION}-alpine as builder
 
 WORKDIR /app