Sync feature/nest-zappa-migration with main by rudransh-shrivastava · Pull Request #3576 · OWASP/Nest

rudransh-shrivastava · 2026-01-26T16:13:46Z

Sync main

Proposed change

Resolves #(put the issue number here)

Add the PR description here.

Checklist

Required: I followed the contributing workflow
Required: I verified that my code works as intended and resolves the issue as described
Required: I ran make check-test locally: all warnings addressed, tests passed
I used AI for code, documentation, tests, or communication related to this PR

Bumps [actions/cache](https://github.com/actions/cache) from 5.0.1 to 5.0.2. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@9255dc7...8b402f5) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 5.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [strawberry-graphql-django](https://github.com/strawberry-graphql/strawberry-django) from 0.73.1 to 0.74.1. - [Release notes](https://github.com/strawberry-graphql/strawberry-django/releases) - [Changelog](https://github.com/strawberry-graphql/strawberry-django/blob/main/CHANGELOG.md) - [Commits](strawberry-graphql/strawberry-django@0.73.1...0.74.1) --- updated-dependencies: - dependency-name: strawberry-graphql-django dependency-version: 0.74.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: Ahmed Gouda <ahmed.gouda@owasp.org> Co-authored-by: Kate Golovanova <kate@kgthreads.com>

…SP#3426) * refactor: mark props as read-only in multiple frontend components * Run make-check --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

…#3430) Bumps [weasyprint](https://github.com/Kozea/WeasyPrint) from 67.0 to 68.0. - [Release notes](https://github.com/Kozea/WeasyPrint/releases) - [Changelog](https://github.com/Kozea/WeasyPrint/blob/main/docs/changelog.rst) - [Commits](Kozea/WeasyPrint@v67.0...v68.0) --- updated-dependencies: - dependency-name: weasyprint dependency-version: '68.0' dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…P#3398) * use top level await instead of async IIFE * adding consistent error handling * Update code --------- Co-authored-by: Rudransh Shrivastava <rudransh.shrivastava@owasp.org>

* Add no-index-key eslint rule * Update logic to use react rule * Address comments

* refactor: update ContributorsList component * fix: sync ShowMoreButton state and fix avatar URL * Update code --------- Co-authored-by: Kate <kate@kgthreads.com>

* Update ci/cd: add codecov upload steps * Update code

…and eliminating the class wrapper (OWASP#3446) * Move program post_save signal handler to module level * Update docstring --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

Bumps the npm_and_yarn group with 1 update in the /frontend directory: [lodash](https://github.com/lodash/lodash). Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.1.0 to 6.2.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@83679a8...a309ff8) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…3484) Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

* refactor: use optional chaining in programs page * Run make check * Run make check --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Kate <kate@kgthreads.com>

…3485) * fix: prefer optional chaining over logical AND guards (S6582) * Run make check --------- Co-authored-by: Kate <kate@kgthreads.com>

…2984) (OWASP#3406) * feat: implement enforced Semgrep scanning with clean baseline (OWASP#2984) * chore: address CodeRabbit review (pin versions, optimize workflow, and add timeout) * fix: resolve SonarCloud security hotspot by hardening permissions and removing unused env * fix: pin github actions to SHA hashes to resolve sonarcloud hotspot * Refactor semgrep and update CI/CD workflows * Refactor semgrep and update CI workflows * backup: save all refactor work and formatting * chore: final cleanup * chore: address CodeRabbit review (pin versions and fix redundant steps) * chore: address CodeRabbit review * Updated cspell/custom-dict.txt * refactor: add artifact archiving * Consolidate ci/cd and local command run. Improve security scan implementation. Co-authored-by: kart-u <kart-u@users.noreply.github.com> Co-authored-by: Noland Crane <noland-crane@users.noreply.github.com> * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: kart-u <kart-u@users.noreply.github.com> Co-authored-by: Noland Crane <noland-crane@users.noreply.github.com> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@8e8c483...de0fac2) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…3412) * Make Project Matrics page responsive for mobile screens * fixed code rabbit review * fixed review * fixed coderabbit review * fixed code * switch to new FormatJS message parser * fixed sonarqube warning * maked ui consistent in both mobile and dekstop * remove unwanted file * Update Metrics card styling * Update toLocaleString locale setting --------- Co-authored-by: Kate <kate@kgthreads.com>

Django's ObjectDoesNotExist exception does not accept keyword arguments. Using `ObjectDoesNotExist(msg=...)` raises a TypeError instead of the intended ObjectDoesNotExist exception, breaking error handling in the mentorship module mutations. Changes: - Replace `ObjectDoesNotExist(msg=...)` with positional arguments - Add ASSIGNEE_NOT_FOUND_MSG constant to follow linter rules - Use variable for f-string message to satisfy EM102 rule Fixes OWASP#3521 Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

…er (OWASP#3531) * refactor: replace deprecated matchMedia listeners with addEventListener * refactor: modernize useIsMobile hook and fix styling * Update code --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

* Fix docstring formatting per ruff checks * Update code * Update code * Update code * Update tests --------- Co-authored-by: Moiz Zulfiqar <flade@Moizs-MacBook-Air.local> Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

* feat: add recent pull requests to public module page * Fix milestones block padding * refactor: module pr view --------- Co-authored-by: Kate <kate@kgthreads.com>

coderabbitai · 2026-01-26T16:13:59Z

Important

Review skipped

Too many files!

96 files out of 246 files are above the max files limit of 150.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

github-actions · 2026-01-26T16:14:29Z

PR validation failed: No linked issue and no valid closing issue reference in PR description

…igration-sync-main

sonarqubecloud · 2026-01-26T16:17:23Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

arkid15r and others added 30 commits January 19, 2026 11:06

Run make update

9220262

Maked issue list responsive (OWASP#3413)

7089e5c

Co-authored-by: Ahmed Gouda <ahmed.gouda@owasp.org> Co-authored-by: Kate Golovanova <kate@kgthreads.com>

Run make update

12c35a7

Update README.md

fc60fa6

use top-level await instead of async IIFE in graphql-codegen.ts (OWAS…

50b669b

…P#3398) * use top level await instead of async IIFE * adding consistent error handling * Update code --------- Co-authored-by: Rudransh Shrivastava <rudransh.shrivastava@owasp.org>

Add no-index-key eslint rule (OWASP#3429)

8aab927

* Add no-index-key eslint rule * Update logic to use react rule * Address comments

refactor: extract shared ContributorsList component (OWASP#3408)

9c0de8b

* refactor: update ContributorsList component * fix: sync ShowMoreButton state and fix avatar URL * Update code --------- Co-authored-by: Kate <kate@kgthreads.com>

Run make update

8229c5c

Update ci/cd: add codecov upload steps (OWASP#3452)

7dc51d7

* Update ci/cd: add codecov upload steps * Update code

Update codecov configuration

feac323

Update .github/workflows/run-ci-cd.yaml

21adb39

Mitigate CVE-2026-23745

984535f

Fix codecov ci/cd step

e002985

Run make update

97f3907

fix issue (OWASP#3477)

6838e55

refactor: remove redundant character classes in slugify regex (OWASP#…

7484604

…3484) Co-authored-by: Arkadii Yakovets <2201626+arkid15r@users.noreply.github.com>

Refactor programs page to use optional chaining (S6582) (OWASP#3486)

b91bbc5

* refactor: use optional chaining in programs page * Run make check * Run make check --------- Co-authored-by: Arkadii Yakovets <arkadii.yakovets@owasp.org> Co-authored-by: Kate <kate@kgthreads.com>

fix: prefer optional chaining over logical AND guards (S6582) (OWASP#…

41e700a

…3485) * fix: prefer optional chaining over logical AND guards (S6582) * Run make check --------- Co-authored-by: Kate <kate@kgthreads.com>

date selection for modules edit and create (OWASP#3424)

15de802

Run make update

91afccf

Bump run-frontend-e2e-tests timeout

c716b07

arkid15r and others added 10 commits January 24, 2026 12:20

Refine ci/cd sequence

7cd434b

Run make update

420f6fe

Update proxy/production.conf

7e26430

Update docker-compose/local/compose.yaml

dfc96ef

feat: add recent pull requests to public module page (OWASP#3516)

a524b2d

* feat: add recent pull requests to public module page * Fix milestones block padding * refactor: module pr view --------- Co-authored-by: Kate <kate@kgthreads.com>

Merge branch 'main' into feature/nest-zappa-migration-sync-main

86be457

github-actions bot added docs Improvements or additions to documentation frontend docker Pull requests that update Docker code nestbot backend-tests frontend-tests makefile ci labels Jan 26, 2026

github-actions bot closed this Jan 26, 2026

rudransh-shrivastava reopened this Jan 26, 2026

Merge branch 'feature/nest-zappa-migration' into feature/nest-zappa-m…

c4aa4b2

…igration-sync-main

rudransh-shrivastava marked this pull request as ready for review January 26, 2026 16:16

rudransh-shrivastava requested review from arkid15r and kasya as code owners January 26, 2026 16:16

arkid15r enabled auto-merge January 26, 2026 17:25

arkid15r approved these changes Jan 26, 2026

View reviewed changes

arkid15r merged commit eb7b36d into OWASP:feature/nest-zappa-migration Jan 26, 2026
30 of 31 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Sync feature/nest-zappa-migration with main#3576

Sync feature/nest-zappa-migration with main#3576
arkid15r merged 56 commits intoOWASP:feature/nest-zappa-migrationfrom
rudransh-shrivastava:feature/nest-zappa-migration-sync-main

rudransh-shrivastava commented Jan 26, 2026

Uh oh!

coderabbitai bot commented Jan 26, 2026

Review skipped

Uh oh!

github-actions bot commented Jan 26, 2026

Uh oh!

sonarqubecloud bot commented Jan 26, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

18 participants

Comments

Uh oh!

Conversation

rudransh-shrivastava commented Jan 26, 2026

Proposed change

Checklist

Uh oh!

coderabbitai bot commented Jan 26, 2026

Review skipped

Uh oh!

github-actions bot commented Jan 26, 2026

Uh oh!

sonarqubecloud bot commented Jan 26, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

18 participants

Comments