Fix homepage container flexibility

.github/workflows/run-ci-cd.yaml

@@ -492,26 +492,15 @@ jobs:
       - name: Check out repository
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
 
-      - name: Install pnpm
-        uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda
-        with:
-          run_install: true
-          version: 10
-
       - name: Set up Node
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
         with:
-          cache-dependency-path: frontend/pnpm-lock.yaml
-          cache: 'pnpm'
           node-version: 22
 
-      - name: Run lighthouse-ci
-        env:
-          LHCI_BASE_URL: 'https://nest.owasp.dev'
-        run: |
-          pnpm run lighthouse-ci
-        timeout-minutes: 15
+      - name: Run Lighthouse CI
         working-directory: frontend
+        run: |
+          npx -y @lhci/[email protected] autorun
 
   build-production-images:
     name: Build Production Images

.github/workflows/run-code-ql.yaml

@@ -29,7 +29,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498
+        uses: github/codeql-action/init@96f518a34f7a870018057716cc4d7a5c014bd61c
         with:
           languages: ${{ matrix.language }}
 
@@ -53,6 +53,6 @@ jobs:
         run: pnpm install --frozen-lockfile
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498
+        uses: github/codeql-action/analyze@96f518a34f7a870018057716cc4d7a5c014bd61c
         with:
           category: /language:${{ matrix.language }}

.pre-commit-config.yaml

@@ -10,7 +10,9 @@ repos:
         exclude: (.github|pnpm-lock.yaml)
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
+
     rev: v0.12.11
+
     hooks:
       - id: ruff
         args:

backend/pyproject.toml

@@ -7,8 +7,10 @@ name = "OWASP Nest"
 version = "0.1.0"
 description = "Your gateway to OWASP"
 authors = [ "Arkadii Yakovets <[email protected]>" ]
+authors = [ "Arkadii Yakovets <[email protected]>" ]
 readme = "README.md"
 
+packages = [ { include = "apps" } ]
 packages = [ { include = "apps" } ]
 
 [tool.poetry.dependencies]
@@ -20,6 +22,7 @@ django-cors-headers = "^4.7.0"
 django-ninja = "^1.4.3"
 django-redis = "^6.0.0"
 django-storages = { extras = [ "s3" ], version = "^1.14.4" }
+django-storages = { extras = [ "s3" ], version = "^1.14.4" }
 emoji = "^2.14.1"
 geopy = "^2.4.1"
 gunicorn = "^23.0.0"
@@ -44,7 +47,7 @@ requests = "^2.32.5"
 sentry-sdk = { extras = [ "django" ], version = "^2.20.0" }
 slack-bolt = "^1.22.0"
 slack-sdk = "^3.35.0"
-strawberry-graphql = { extras = [ "django" ], version = "^0.281.0" }
+strawberry-graphql = { extras = [ "django" ], version = "^0.278.1" }
 strawberry-graphql-django = "^0.65.1"
 thefuzz = "^0.22.1"
 
@@ -64,6 +67,64 @@ python-dotenv = "^1.0.1"
 [tool.ruff]
 target-version = "py313"
 
+line-length = 99
+lint.select = [ "ALL" ]
+lint.extend-select = [ "I" ]
+lint.ignore = [
+  "ANN",     # https://docs.astral.sh/ruff/rules/#flake8-annotations-ann/
+  "ARG002",  # https://docs.astral.sh/ruff/rules/unused-method-argument/
+  "C901",    # https://docs.astral.sh/ruff/rules/complex-structure/
+  "COM812",  # https://docs.astral.sh/ruff/rules/missing-trailing-comma/
+  "D407",    # https://docs.astral.sh/ruff/rules/missing-dashed-underline-after-section/
+  "DJ012",   # https://docs.astral.sh/ruff/rules/django-unordered-body-content-in-model/
+  "FIX002",  # https://docs.astral.sh/ruff/rules/line-contains-todo/
+  "PLC0415", # https://docs.astral.sh/ruff/rules/import-outside-top-level/
+  "PLR0912", # https://docs.astral.sh/ruff/rules/too-many-branches/
+  "PLR0913", # https://docs.astral.sh/ruff/rules/too-many-arguments/
+  "PLR0915", # https://docs.astral.sh/ruff/rules/too-many-statements/
+  "RUF012",  # https://docs.astral.sh/ruff/rules/mutable-class-default/
+  "TD003",   # https://docs.astral.sh/ruff/rules/missing-todo-link/
+]
+lint.per-file-ignores."**/__init__.py" = [
+  "D104", # https://docs.astral.sh/ruff/rules/undocumented-public-package/
+  "F401", # https://docs.astral.sh/ruff/rules/unused-import/
+]
+lint.per-file-ignores."**/management/commands/*.py" = [
+  "D101", # https://docs.astral.sh/ruff/rules/undocumented-public-class/
+  "D102", # https://docs.astral.sh/ruff/rules/undocumented-public-method/
+  "T201", # https://docs.astral.sh/ruff/rules/print/
+]
+lint.per-file-ignores."**/migrations/*.py" = [
+  "D100",   # https://docs.astral.sh/ruff/rules/undocumented-public-module/
+  "D101",   # https://docs.astral.sh/ruff/rules/undocumented-public-class/
+  "D104",   # https://docs.astral.sh/ruff/rules/undocumented-public-package/
+  "E501",   # https://docs.astral.sh/ruff/rules/line-too-long/
+  "RUF012", # https://docs.astral.sh/ruff/rules/mutable-class-default/
+]
+lint.per-file-ignores."**/models/*.py" = [
+  "D106", # https://docs.astral.sh/ruff/rules/undocumented-public-nested-class/
+]
+lint.per-file-ignores."**/rest/v1/*.py" = [
+  "ARG001", # https://docs.astral.sh/ruff/rules/unused-function-argument/
+  "B008",   # https://docs.astral.sh/ruff/rules/function-call-in-default-argument/
+]
+lint.per-file-ignores."**/settings/*.py" = [
+  "RUF012", # https://docs.astral.sh/ruff/rules/mutable-class-default/
+]
+lint.per-file-ignores."**/tests/**/*.py" = [
+  "D100",    # https://docs.astral.sh/ruff/rules/undocumented-public-module/
+  "D101",    # https://docs.astral.sh/ruff/rules/undocumented-public-class/
+  "D102",    # https://docs.astral.sh/ruff/rules/undocumented-public-method/
+  "D103",    # https://docs.astral.sh/ruff/rules/undocumented-public-function/
+  "D107",    # https://docs.astral.sh/ruff/rules/undocumented-public-init/
+  "PLR2004", # https://docs.astral.sh/ruff/rules/magic-value-comparison/
+  "RUF012",  # https://docs.astral.sh/ruff/rules/mutable-class-default/
+  "S101",    # https://docs.astral.sh/ruff/rules/assert/
+  "SLF001",  # https://docs.astral.sh/ruff/rules/private-member-access/
+]
+[tool.ruff]
+target-version = "py313"
+
 line-length = 99
 lint.select = [ "ALL" ]
 lint.extend-select = [ "I" ]
@@ -134,12 +195,26 @@ addopts = [
   "--durations=5",
   "--no-cov-on-fail",
   "--numprocesses=auto",
+  "--cov-config=pyproject.toml",
+  "--cov-fail-under=80",
+  "--cov-precision=2",
+  "--cov-report=term-missing",
+  "--cov=.",
+  "--dist=loadscope",
+  "--durations-min=1",
+  "--durations=5",
+  "--no-cov-on-fail",
+  "--numprocesses=auto",
 ]
 filterwarnings = [
   "ignore::DeprecationWarning:pytest_cov",
   "ignore::DeprecationWarning:xdist",
   "ignore::django.conf.RemovedInDjango60Warning:django",
   "ignore::pydantic.warnings.PydanticDeprecatedSince20",
+  "ignore::DeprecationWarning:pytest_cov",
+  "ignore::DeprecationWarning:xdist",
+  "ignore::django.conf.RemovedInDjango60Warning:django",
+  "ignore::pydantic.warnings.PydanticDeprecatedSince20",
 ]
 log_level = "INFO"
 
@@ -157,19 +232,38 @@ omit = [
   "wsgi.py",
 ]
 
+[tool.coverage.run]
+branch = true
+omit = [
+  "__init__.py",
+  "**/admin.py",
+  "**/apps.py",
+  "**/migrations/*",
+  "**/mentorship/*", # TODO: work in progress
+  "manage.py",
+  "settings/*",
+  "tests/*",
+  "wsgi.py",
+]
+
 [tool.mypy]
 explicit_package_bases = true
 ignore_missing_imports = true
 mypy_path = "backend"
 plugins = [ "strawberry.ext.mypy_plugin" ]
+plugins = [ "strawberry.ext.mypy_plugin" ]
 
 [[tool.mypy.overrides]]
 disable_error_code = [ "attr-defined" ]
 module = [ "apps.*.models.mixins.*", "apps.*.admin.*" ]
+disable_error_code = [ "attr-defined" ]
+module = [ "apps.*.models.mixins.*", "apps.*.admin.*" ]
 
 [[tool.mypy.overrides]]
 disable_error_code = [ "var-annotated" ]
 module = [ "apps.*.migrations.*" ]
+disable_error_code = [ "var-annotated" ]
+module = [ "apps.*.migrations.*" ]
 
 [[tool.mypy.overrides]]
 disable_error_code = [ "return-value", "attr-defined", "misc" ]
@@ -180,3 +274,11 @@ format = true
 format_css = true
 format_js = true
 indent = 4
+disable_error_code = [ "return-value", "attr-defined", "misc" ]
+module = [ "apps.*.api.internal.queries.*", "apps.*.api.internal.nodes.*" ]
+
+[tool.djlint]
+format = true
+format_css = true
+format_js = true
+indent = 4

frontend/Makefile

@@ -28,10 +28,7 @@ format-frontend-code:
 		&& pnpm run format))
 
 lighthouse-ci:
-	@cd frontend && pnpm run lighthouse-ci
-
-lighthouse-ci-desktop:
-	@cd frontend && pnpm run lighthouse-ci:desktop
+	@cd frontend && npx -y @lhci/[email protected] autorun --collect.url=http://localhost:3000
 
 lint-frontend-code:
 	@(cd frontend && pnpm run lint:check >/dev/null 2>&1 \

frontend/lighthouserc.json

@@ -0,0 +1,19 @@
+{
+  "ci": {
+    "assert": {
+      "assertions": {
+        "categories:performance": ["warn", { "minScore": 0.9 }],
+        "categories:accessibility": ["warn", { "minScore": 0.9 }],
+        "categories:best-practices": ["warn", { "minScore": 0.9 }],
+        "categories:seo": ["warn", { "minScore": 0.9 }]
+      }
+    },
+    "collect": {
+      "url": ["https://nest.owasp.dev/"],
+      "numberOfRuns": 3
+    },
+    "upload": {
+      "target": "temporary-public-storage"
+    }
+  }
+}