chore(sync) Syncing changes from alpha to master

.github/workflows/codespell.yaml

@@ -11,7 +11,7 @@ jobs:
       cancel-in-progress: true
     steps:
       - name: 💾 Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
       - name: ✔️ Codespell
         uses: codespell-project/actions-codespell@master
         with:

.github/workflows/lighthouse.yml

@@ -7,15 +7,17 @@ jobs:
     env:
       config: 'Release'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: setup dotnet
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@131b410979e0b49e2162c0718030257b22d6dc2c
         with:
-          dotnet-version: '8.0.x'
+          dotnet-version: '9.0.x'
+      - name: setup dotnet ef
+        run: dotnet tool install --tool-path .\.dotnet-tools dotnet-ef --version 9.0.11
       - name: setup node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '16.x'
       - name: install node deps
@@ -31,11 +33,11 @@ jobs:
           echo "}}" >> appsettings.cust.json
           cat appsettings.cust.json
       - name: install localdb
-        uses: potatoqualitee/mssqlsuite@v1.5.1
+        uses: potatoqualitee/mssqlsuite@2291d923e83859edd871679c05b379037376761f
         with:
           install: localdb
       - name: migrate
-        run: dotnet ef database update --project web/web.csproj
+        run: .\.dotnet-tools\dotnet-ef database update --project web/web.csproj
       - name: run Lighthouse CI
         run: |
           npm install -g @lhci/cli@0.9.x

.github/workflows/release.yaml

@@ -11,18 +11,23 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
 
         with:
           fetch-depth: 0
           persist-credentials: false
+      - name: setup node
+        uses: actions/setup-node@v6
+        with:
+          node-version: '20.x'
+      - name: install node deps
+        run: npm install --ignore-scripts --no-audit --no-fund
       - name: Semantic Release
-        uses: cycjimmy/semantic-release-action@v3
+        uses: cycjimmy/semantic-release-action@1c8dbaa298552ad40802cf44320879943de90278
         with:
-          semantic_version: 18
-          extra_plugins: |
-            @semantic-release/changelog@6
-            @semantic-release/exec
-            @semantic-release/git@10
+          semantic_version: 24
         env:
+          NPM_CONFIG_LEGACY_PEER_DEPS: true
+          NPM_CONFIG_AUDIT: false
+          NPM_CONFIG_FUND: false
           GITHUB_TOKEN: ${{ secrets.RELEASE_PAT }}

.github/workflows/sonar.yml

@@ -8,22 +8,22 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
         with:
           distribution: 'temurin'
           java-version: 17
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
         with:
           fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
       - name: Cache SonarCloud packages
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~\sonar\cache
           key: ${{ runner.os }}-sonar
           restore-keys: ${{ runner.os }}-sonar
       - name: Cache SonarCloud scanner
         id: cache-sonar-scanner
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: .\.sonar\scanner
           key: ${{ runner.os }}-sonar-scanner

.github/workflows/test.yaml

@@ -12,15 +12,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
 
       - name: setup node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '18.x'
 
       - name: install node deps
-        run: npm install
+        run: npm install --ignore-scripts --no-audit --no-fund
 
       - name: lint
         run: npm run lint
@@ -32,18 +32,18 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
 
       - name: setup dotnet
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@131b410979e0b49e2162c0718030257b22d6dc2c
         with:
-          dotnet-version: '8.0.x'
+          dotnet-version: '9.0.x'
       - name: setup node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '18.x'
       - name: install node deps
-        run: npm install
+        run: npm install --ignore-scripts --no-audit --no-fund
       - name: node build
         run: npm run build
       - name: create settings file
@@ -55,11 +55,13 @@ jobs:
           echo "}}" >> appsettings.cust.json
           cat appsettings.cust.json
       - name: install localdb
-        uses: potatoqualitee/mssqlsuite@v1.7
+        uses: potatoqualitee/mssqlsuite@2291d923e83859edd871679c05b379037376761f
         with:
           install: localdb
+      - name: setup dotnet ef
+        run: dotnet tool install --tool-path .\.dotnet-tools dotnet-ef --version 9.0.11
       - name: migrate
-        run: dotnet ef database update --project web/web.csproj
+        run: .\.dotnet-tools\dotnet-ef database update --project web/web.csproj
 
   integration_tests:
     name: 'integration tests'
@@ -69,23 +71,25 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
 
       - name: setup dotnet
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@131b410979e0b49e2162c0718030257b22d6dc2c
         with:
-          dotnet-version: '8.0.x'
+          dotnet-version: '9.0.x'
+      - name: setup dotnet ef
+        run: dotnet tool install --tool-path .\.dotnet-tools dotnet-ef --version 9.0.11
       - name: setup node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '18.x'
       - name: setup java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
         with:
           distribution: 'microsoft'
           java-version: '17'
       - name: install node deps
-        run: npm install
+        run: npm install --ignore-scripts --no-audit --no-fund
       - name: node build
         run: npm run build
       - name: install dotnet deps
@@ -109,13 +113,17 @@ jobs:
         if: always()
         run: |
           # generate a report just to show in the action history
-          reportgenerator -reports:coverage.cobertura.xml -targetdir:coverage/ -reporttypes:textSummary
-          # print out the report
-          cat coverage/Summary.txt
+          if (Test-Path coverage.cobertura.xml) {
+            reportgenerator -reports:coverage.cobertura.xml -targetdir:coverage/ -reporttypes:textSummary
+            # print out the report
+            cat coverage/Summary.txt
+          } else {
+            Write-Host "Coverage file not found, skipping report generation"
+          }
 
       - name: upload cov
         if: always()
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de
         with:
           files: ./coverage.cobertura.xml
           verbose: true
@@ -187,23 +195,23 @@ jobs:
 
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
 
       - name: setup dotnet
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@131b410979e0b49e2162c0718030257b22d6dc2c
         with:
-          dotnet-version: '8.0.x'
+          dotnet-version: '9.0.x'
       - name: setup node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '18.x'
       - name: setup java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
         with:
           distribution: 'microsoft'
           java-version: '17'
       - name: install node deps
-        run: npm install
+        run: npm install --ignore-scripts --no-audit --no-fund
       - name: node build
         run: npm run build
       - name: install dotnet deps
@@ -227,13 +235,17 @@ jobs:
         if: always()
         run: |
           # generate a report just to show in the action history
-          reportgenerator -reports:coverage.cobertura.xml -targetdir:coverage/ -reporttypes:textSummary
-          # print out the report
-          cat coverage/Summary.txt
+          if (Test-Path coverage.cobertura.xml) {
+            reportgenerator -reports:coverage.cobertura.xml -targetdir:coverage/ -reporttypes:textSummary
+            # print out the report
+            cat coverage/Summary.txt
+          } else {
+            Write-Host "Coverage file not found, skipping report generation"
+          }
 
       - name: upload cov
         if: always()
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de
         with:
           files: ./coverage.cobertura.xml
           verbose: true

.github/workflows/update.yaml

@@ -10,15 +10,15 @@ jobs:
     runs-on: ubuntu-latest
     if: github.ref_name == 'dev'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
         with:
           ref: alpha
       - name: Reset promotion branch
         run: |
           git fetch origin ${{github.ref_name}}:${{github.ref_name}}
           git reset --hard ${{github.ref_name}}
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v6.0.0
+        uses: peter-evans/create-pull-request@6699836a213cf8b28c4f0408a404a6ac79d4458a
         with:
           labels: automated pr
           branch: ${{github.ref_name}}
@@ -28,15 +28,15 @@ jobs:
     runs-on: ubuntu-latest
     if: github.ref_name == 'alpha'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
         with:
           ref: master
       - name: Reset promotion branch
         run: |
           git fetch origin ${{github.ref_name}}:${{github.ref_name}}
           git reset --hard ${{github.ref_name}}
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v6.0.0
+        uses: peter-evans/create-pull-request@6699836a213cf8b28c4f0408a404a6ac79d4458a
         with:
           labels: automated pr
           branch: ${{github.ref_name}}

.gitlab-ci.yml

@@ -13,7 +13,7 @@ stages:
   - publish
 
 precommit:
-  image: mcr.microsoft.com/dotnet/sdk:8.0-alpine
+  image: mcr.microsoft.com/dotnet/sdk:9.0-alpine
   stage: test
   except:
     - public
@@ -40,7 +40,7 @@ precommit:
     - pre-commit run stylelint --all-files
 
 build_web:
-  image: mcr.microsoft.com/dotnet/sdk:8.0-alpine
+  image: mcr.microsoft.com/dotnet/sdk:9.0-alpine
   stage: build
   except:
     - public
@@ -73,7 +73,7 @@ deploy_test:
 
 public:
   stage: publish
-  image: python:3.12
+  image: python:3.14
   needs:
     - job: build_web
       artifacts: false
@@ -116,7 +116,7 @@ github:
   only:
     - public # public branch
   stage: publish
-  image: python:3.12
+  image: python:3.14
   before_script:
     - 'command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )'
     - eval $(ssh-agent -s)

Dockerfile

@@ -10,7 +10,7 @@
 # to access webapp
 # http://localhost:1234
 
-FROM mcr.microsoft.com/dotnet/sdk:8.0-alpine AS build
+FROM mcr.microsoft.com/dotnet/sdk:9.0-alpine AS build
 ENV DOTNET_CLI_TELEMETRY_OPTOUT=1
 
 WORKDIR /app
@@ -34,18 +34,23 @@ ARG USER \
 # create config
 RUN echo "{\"Demo\": true, \"solr\": {\"atlas_address\": \"$SOLR/solr/atlas\", \"atlas_lookups_address\": \"$SOLR/solr/atlas_lookups\"},\"ConnectionStrings\": {\"AtlasDatabase\": \"Server=$HOST;Database=atlas;User Id=$USER; Password=$PASSWORD; MultipleActiveResultSets=true;TrustServerCertificate=YES\"},  \"footer\": {\"links\":{\"Status\": {\"Status\": \"https://status.atlas.bi/status/atlas\", \"Documentation\": \"https://atlas.bi\", \"Source Code\": \"https://github.com/atlas-bi/atlas-bi-library\" }},\"subtitle\": \"Atlas was created by the Riverside Healthcare Analytics team.\"}}" > appsettings.cust.json
 
-# migrate
-RUN dotnet tool install --global dotnet-ef \
-  && export PATH="$PATH:/root/.dotnet/tools" \
-  && dotnet tool restore
-
-RUN  export PATH="$PATH:/root/.dotnet/tools" && dotnet ef database update --project web.csproj -v
-
 RUN dotnet publish -c Release -o out web.csproj
 
-FROM mcr.microsoft.com/dotnet/sdk:8.0-alpine
+FROM mcr.microsoft.com/dotnet/aspnet:9.0-alpine
+
 ENV DOTNET_CLI_TELEMETRY_OPTOUT=1
+ENV DOTNET_SYSTEM_GLOBALIZATION_INVARIANT=false
+
 WORKDIR /app
+
+RUN apk add --no-cache icu-libs
+
 COPY --from=build ["/app/web/out", "./"]
 
+RUN getent group app || addgroup -S app \
+ && getent passwd app || adduser -S -G app app \
+ && chown -R app:app /app
+
+USER app
+
 CMD ASPNETCORE_URLS=http://*:$PORT dotnet "Atlas_Web.dll"