Sync feature/nest-zappa-migration with main by rudransh-shrivastava · Pull Request #3375 · OWASP/Nest

rudransh-shrivastava · 2026-01-16T06:41:34Z

Resolves #(put the issue number here)

Sync feature/nest-zappa-migration with main

Checklist

Required: I followed the contributing workflow
Required: I verified that my code works as intended and resolves the issue as described
Required: I ran make check-test locally: all warnings addressed, tests passed
I used AI for code, documentation, tests, or communication related to this PR

* fixed zap baseline scan * fix:removed false positives * lint/format * fix:removed false positives * update:followed recommendation * lint/format * Update code * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

…WASP#3211) * Define explicit top-level permissions for GitHub Actions workflows * ci: set empty workflow-level permissions and rely on job scopes * ci: allow gha cache writes via job-level actions permission * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

* Remove unnecessary zero fractions from number literals * Fix: remove unnecessary zero fractions across the codebase

* refactor: duplicate 'module not found' message * Update code * Update code * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

* fix: remove redundant non-null assertions * fix: remove remaining redundant non-null assertions * chore: replace 1.0 with 1 to satisfy sonar rule * chore: remove unintended package-lock.json from PR --------- Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

…OWASP#3230)

Co-authored-by: Kate Golovanova <kate@kgthreads.com>

…SP#3208) * refactor: use loading property from useQuery instead of loading state * refactor: remove unused MainPageData type import * fix eslint errors * fix tests * apply rabbit suggestion * Update code * Add ErrorDisplay for network error * remove unused dependency to resolve rabbit issue * Fix tests --------- Co-authored-by: Kate <kate@kgthreads.com>

* fixed multiple imports * replaces getAttributes with dataset * removed zero-fraction-literals * fix:space in the import statement * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org>

* refactore chapterMap * write unit and e2e tests * fix sonarcloud issues * add peer dependency and fix coderabbit and sonar issues * use section to ensure accessibility across all devices. * add null check in cleanup function * fix cluster position change * fix:improve accessibility for user location marker * fix: use title instead of alt for user location marker accessibility * fix: separate map control logic from cleanup to prevent race conditions * fix: improve user location marker accessibility with proper aria labeling --------- Co-authored-by: Kate Golovanova <kate@kgthreads.com>

…OWASP#3246) * fix(ci): correct ZAP baseline report filename to avoid upload failure * fix(ci): correct ZAP baseline report filename to avoid upload failure * Update code * fix(ci): correct ZAP baseline report filename to avoid upload failure * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

) * fix(frontend): merge duplicate path imports in eslint config * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

* refactor: remove redundant type assertions in frontend * resolved line-ending/formatting issues across backend and frontend files to pass make check * refactor: remove redundant type assertion for ExtendedSession * type assertion in DetailsCard to satisfy linting and PR feedback. --------- Co-authored-by: Kate Golovanova <kate@kgthreads.com> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

…, and add tests (OWASP#3040) * update nest badges code * update tests in nest badge * apply coderabbit suggestions * Refactor badges with base command * resolve sonarcloud issues * Update code * apply bulk save and pluralize log messages * update code * Update code * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

* Refactor: Replace negated conditions with positive checks * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

* ci: enable Docker layer caching for cspell spellcheck job * ci: pin Docker GitHub Actions to commit SHAs * ci: scope GHA cache for cspell Docker build * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

* refactor: use replaceAll in breadcrumbs * docs: add comprehensive JSDoc and refactor logic to replaceAll * docs: fix JSDoc formatting and remove extra asterisk * refactor: final polish on spacing and docs * chore: trigger final fresh CI scan * refactor: optimize constants placement and use replaceAll * refactor: achieve full replaceAll consistency and optimize regex

…WASP#3290) * ci: cache Trivy vulnerability database for repo and filesystem scans * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org>

…end (OWASP#3345) Bumps [strawberry-graphql](https://github.com/strawberry-graphql/strawberry) from 0.288.4 to 0.289.0. - [Release notes](https://github.com/strawberry-graphql/strawberry/releases) - [Changelog](https://github.com/strawberry-graphql/strawberry/blob/main/CHANGELOG.md) - [Commits](strawberry-graphql/strawberry@0.288.4...0.289.0) --- updated-dependencies: - dependency-name: strawberry-graphql dependency-version: 0.289.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…WASP#3346) Bumps [@apollo/client](https://github.com/apollographql/apollo-client) from 4.0.12 to 4.0.13. - [Release notes](https://github.com/apollographql/apollo-client/releases) - [Changelog](https://github.com/apollographql/apollo-client/blob/main/CHANGELOG.md) - [Commits](https://github.com/apollographql/apollo-client/compare/@apollo/client@4.0.12...@apollo/client@4.0.13) --- updated-dependencies: - dependency-name: "@apollo/client" dependency-version: 4.0.13 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci: fix ignored and missing job-level timeout-minutes * chore(ci): reorder timeout-minutes in workflow jobs * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org>

…P#3357)

* update: implement show more functionality for About page sections * fix: resolve CodeRabbit feedback on About page * fix: correct roadmap filtering logic for show more button * Add constants --------- Co-authored-by: Kate <kate@kgthreads.com>

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.1.0 to 6.2.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@395ad32...6044e13) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* add tags to issues * changed look of tags * option to filter tag in backend , lowered the tags display amount in smaller screen * sorting but count and filter of tags are working * fixed small visual bug * added test for tags , display, sort by count and filtering * Update frontend/src/components/Card.tsx Co-authored-by: Kate Golovanova <kate@kgthreads.com> * Update frontend/src/components/Card.tsx Co-authored-by: Kate Golovanova <kate@kgthreads.com> * Update frontend/src/components/Card.tsx Co-authored-by: Kate Golovanova <kate@kgthreads.com> * fixed whitespace issues * added backend test * fixed typo * updated order of 'tags' in issue.ts and card.ts * removed tag filtering for now , and respective tests * removed unused tooltip prop * added back unused prop * reverted backend changes * replaced tags with labels , labels passes to card props * removed logs that was used for debugging * revamped tests for displaying logs * fixed backend tests * Use LabelList component for labels * Remove unused props * Clean up * Clean up * Run make check --------- Co-authored-by: Kate Golovanova <kate@kgthreads.com>

coderabbitai · 2026-01-16T06:41:45Z

Important

Review skipped

Too many files!

106 files out of 256 files are above the max files limit of 150.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

github-actions · 2026-01-16T06:41:57Z

PR validation failed: No linked issue and no valid closing issue reference in PR description

sonarqubecloud · 2026-01-16T06:43:42Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

rudransh-shrivastava · 2026-01-16T06:53:23Z

Only PR linked issue check fails.

arkid15r and others added 30 commits January 5, 2026 15:33

Update backend/data/nest.json.gz

07b45ef

Run make update

4d694a2

Update .zapconfig

f67baf6

Run make update

03fab9c

Update .zapconfig

65bf360

Fix/remove zero fractions (OWASP#3224)

ae2b40c

* Remove unnecessary zero fractions from number literals * Fix: remove unnecessary zero fractions across the codebase

Update .zapconfig

2efc8de

Run make update

73a4627

Improved readability by replacing escaped backslashes with String.raw (…

3124da4

…OWASP#3230)

Fixed Outline of Show more button (OWASP#3178)

71548f0

Co-authored-by: Kate Golovanova <kate@kgthreads.com>

Run make update

894ef19

fixed same module multiple imports (OWASP#3250)

3b85a08

* fixed multiple imports * replaces getAttributes with dataset * removed zero-fraction-literals * fix:space in the import statement * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org>

Run make update

f23a654

Update .github/workflows/run-ci-cd.yaml

3d9bc8b

Run make update

5f283e6

Clean up frontend/jest.setup.ts

f0ec8d9

CI: cache Trivy vulnerability database for repo and filesystem scans (O…

eef43b6

…WASP#3290) * ci: cache Trivy vulnerability database for repo and filesystem scans * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org>

dependabot bot and others added 11 commits January 14, 2026 17:17

Update frontend/eslint.config.mjs: avoid duplicate imports

ad3edb8

ci: fix ignored and missing job-level timeout-minutes (OWASP#3355)

97e0f48

* ci: fix ignored and missing job-level timeout-minutes * chore(ci): reorder timeout-minutes in workflow jobs * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org>

fix(frontend): remove aria-hidden from focusable canvas element (OWAS…

684a703

…P#3357)

Run make update

f803c67

Merge branch 'main' into feature/nest-zappa-migration-sync-main

26eaff2

Fix conflicts

f78f6e3

github-actions bot added docs Improvements or additions to documentation frontend docker Pull requests that update Docker code nestbot backend-tests frontend-tests makefile ci labels Jan 16, 2026

github-actions bot closed this Jan 16, 2026

rudransh-shrivastava reopened this Jan 16, 2026

rudransh-shrivastava marked this pull request as ready for review January 16, 2026 06:53

rudransh-shrivastava requested review from arkid15r and kasya as code owners January 16, 2026 06:53

arkid15r approved these changes Jan 16, 2026

View reviewed changes

arkid15r merged commit 3fbaedd into OWASP:feature/nest-zappa-migration Jan 16, 2026
52 of 53 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Sync feature/nest-zappa-migration with main#3375

Sync feature/nest-zappa-migration with main#3375
arkid15r merged 65 commits intoOWASP:feature/nest-zappa-migrationfrom
rudransh-shrivastava:feature/nest-zappa-migration-sync-main

rudransh-shrivastava commented Jan 16, 2026

Uh oh!

coderabbitai bot commented Jan 16, 2026

Review skipped

Uh oh!

github-actions bot commented Jan 16, 2026

Uh oh!

sonarqubecloud bot commented Jan 16, 2026

Uh oh!

rudransh-shrivastava commented Jan 16, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Comments

Uh oh!

Conversation

rudransh-shrivastava commented Jan 16, 2026

Checklist

Uh oh!

coderabbitai bot commented Jan 16, 2026

Review skipped

Uh oh!

github-actions bot commented Jan 16, 2026

Uh oh!

sonarqubecloud bot commented Jan 16, 2026

Quality Gate passed

Uh oh!

rudransh-shrivastava commented Jan 16, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Comments