Merge pull request #814 from knnlabs/dev

Dev

Author: nickna

.github/workflows/ci.yml

@@ -119,8 +119,8 @@ jobs:
           push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/master' }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+          cache-from: type=gha,scope=${{ matrix.service }}
+          cache-to: type=gha,scope=${{ matrix.service }},mode=max
 
   # Publish NPM packages (only from master)
   npm-publish:

.github/workflows/codeql-analysis.yml

@@ -75,12 +75,22 @@ jobs:
       with:
         languages: ${{ matrix.language }}
         queries: security-and-quality
+        # Force use of latest CodeQL CLI bundle for .NET 9 compatibility
+        tools: latest
         config: |
           query-filters:
             - exclude:
                 id: js/unused-local-variable
             - exclude:
                 id: cs/static-field-written-by-instance
+            # Exclude common C# precision warnings that are usually intentional
+            - exclude:
+                id: cs/loss-of-precision
+                tags: test
+            # Exclude test-specific collection warnings
+            - exclude:
+                id: cs/unused-collection
+                tags: test
 
     # C# specific build steps
     - name: Set up .NET
@@ -104,7 +114,10 @@ jobs:
 
     - name: Build
       if: matrix.language == 'csharp'
-      run: dotnet build --no-restore --configuration Release
+      run: |
+        # Clean build to ensure CodeQL tracks all files
+        dotnet clean --configuration Release
+        dotnet build --no-restore --configuration Release
 
     # JavaScript specific setup (if needed)
     - name: Setup Node.js

.github/workflows/release.yml

@@ -71,8 +71,8 @@ jobs:
           tags: |
             ${{ env.REGISTRY }}/knnlabs/conduit-${{ matrix.service }}:${{ needs.release.outputs.version }}
             ${{ env.REGISTRY }}/knnlabs/conduit-${{ matrix.service }}:latest
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+          cache-from: type=gha,scope=${{ matrix.service }}
+          cache-to: type=gha,scope=${{ matrix.service }},mode=max
 
   npm:
     name: NPM Release

.gitignore

@@ -422,7 +422,17 @@ secrets.json
 *.p12
 *credentials*
 *secret*
-*token*
+*token*.txt
+*token*.json
+*token*.env
 api-keys.txt
 .secrets
-.vault
+.vault
+
+# CodeQL analysis artifacts
+.codeql/
+codeql-db/
+codeql-results/
+*.sarif
+qlconfig.yml
+.codeql-build.sh