self hosted

deps(deps): bump github/codeql-action in the github-actions group

Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 3 to 4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/labels.yml

@@ -0,0 +1,60 @@
+- name: 'feature'
+  color: 0E8A16
+  description: 'Represents all feature requests and new feature implementations. (Replaces feature-request and new-feature)'
+- name: 'bug'
+  color: D93F0B
+  description: 'Something is not working as expected.'
+- name: 'breaking-change'
+  color: B60205
+  description: 'A change that changes the API or breaks backward compatibility for users.'
+- name: 'security'
+  color: B80808
+  description: 'Addressing a vulnerability or security risk in this project.'
+- name: 'documentation'
+  color: 0052CC
+  description: 'Solely about the documentation of the project.'
+- name: 'refactor'
+  color: 1D76DB
+  description: 'Updating the code with simpler, easier to understand or more efficient syntax or methods.'
+- name: 'ci'
+  color: 1D76DB
+  description: 'Work that improves the continuous integration.'
+- name: 'dependencies'
+  color: 1D76DB
+  description: 'Change in project dependencies.'
+- name: 'in-progress'
+  color: F7C632
+  description: 'Issue is currently being worked on by a developer.'
+- name: 'ready-for-review'
+  color: 0E5C0D
+  description: 'Work is done, initial tests (Self-Review) passed, and ready for review by colleagues.'
+- name: 'changes-requested'
+  color: D93F0B
+  description: 'Reviewer has requested changes/corrections. Author needs to work on it again.'
+- name: 'waiting-on-author'
+  color: FBCA04
+  description: 'Workflow is paused, waiting for author response/changes/clarification.'
+- name: 'blocked'
+  color: B60205
+  description: 'PR/Issue cannot proceed due to external dependency or CI/CD issue.'
+- name: 'priority-critical'
+  color: B80808
+  description: 'Must be addressed as soon as possible.'
+- name: 'priority-high'
+  color: D93F0B
+  description: 'After critical issues are fixed, these should be dealt with before any further issues.'
+- name: 'priority-medium'
+  color: 5319E7
+  description: 'This issue may be useful, and needs some attention.'
+- name: 'priority-low'
+  color: 5319E7
+  description: 'Nice addition, maybe... someday...'
+- name: 'major'
+  color: B60205
+  description: 'This PR causes a major bump in the version number.'
+- name: 'minor'
+  color: 0E8A16
+  description: 'This PR causes a minor bump in the version number.'
+- name: 'Jules'
+  color: 5319E7
+  description: 'Label for Google Jules AI.'

.github/workflows/build-lint-test.yaml

@@ -18,16 +18,17 @@ on:
 jobs:
   main:
     name: Build, Lint, and Test Project
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: 🔧 Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: ${{ inputs.node-version }}
+          package-manager-cache: false
 
       - name: 🛠️ Setup Node.js Corepack
         run: corepack enable
@@ -44,6 +45,14 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-yarn-
 
+      - name: 🗂️ Cache .cache folders
+        uses: actions/cache@v4
+        with:
+          path: packages/**/.cache
+          key: ${{ runner.os }}-cache
+          restore-keys: |
+            ${{ runner.os }}-cache-
+
       - name: 📥 Install Dependencies
         run: yarn install --immutable
 

.github/workflows/codeql.yaml

@@ -14,7 +14,7 @@ on:
 jobs:
   main:
     name: CodeQL Analyze
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
 
     strategy:
       fail-fast: false
@@ -24,17 +24,17 @@ jobs:
 
     steps:
       - name: ⤵️ Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: 🏗 Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           # Details on CodeQL's query packs refer to https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
           # queries: security-extended,security-and-quality
 
       - name: 🏗 Auto build
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       - name: 🚀 Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4

.github/workflows/dependency-review.yaml

@@ -23,11 +23,11 @@ on:
 jobs:
   main:
     name: Dependency Review
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
 
     steps:
       - name: ⤵️ Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: 🚀 Dependency Review
         uses: actions/dependency-review-action@v4

.github/workflows/publish-npm.yaml

@@ -34,13 +34,14 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: 🔧 Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: ${{ inputs.node-version }}
           registry-url: ${{ inputs.npm-registry-url }}
+          package-manager-cache: false
 
       - name: 🛠️ Setup Node.js Corepack
         run: corepack enable

.github/workflows/release.yaml

@@ -28,11 +28,11 @@ on:
 jobs:
   main:
     name: Build & Lint & Test & Release
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
 
     steps:
       - name: ⤵️ Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
           token: ${{ secrets.RELEASER_ACCOUNT_TOKEN }}
@@ -55,9 +55,10 @@ jobs:
           GPG_KEY_ID: ${{ secrets.GPG_KEY_ID }}
 
       - name: 🔧 Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: ${{ inputs.node-version }}
+          package-manager-cache: false
 
       - name: 🛠️ Setup Node.js Corepack
         run: corepack enable

.github/workflows/sync-label.yaml

@@ -12,11 +12,11 @@ on:
 jobs:
   main:
     name: Sync labels
-    runs-on: ubuntu-latest
+    runs-on: blacksmith-2vcpu-ubuntu-2404
 
     steps:
       - name: ⤵️ Check out code from GitHub
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: 🚀 Run Label Syncer
         uses: micnncim/action-label-syncer@v1