3. Monorepo language detector

[witmicko]

Add language detector action

uses github api to automatically detect languages in the process repository and create matrix output to configure workflow downstream.

---

Note

Introduces a Language Detector GitHub Action that detects repo languages and outputs a scanner matrix, with tests, a demo workflow, and minor CodeQL action/doc updates.

• New Action: packages/language-detector/
  • Adds action.yml, CLI scripts (src/detect-languages.js, src/job-configurator.js) to fetch GitHub languages and generate a scan matrix.
  • Includes Jest unit/integration tests, config, and package setup.
  • Adds workflow .github/workflows/test-language-detector.yml to validate action and scripts.
• CodeQL Action
  • scripts/generate-config.js: apply language-specific fallbacks and safely emit outputs; minor refactor/formatting.
  • src/config-loader.js: robust default fallback; small cleanup.
  • Jest config simplification; dependency updates in package.json; tests formatting tweaks.
• Docs
  • Update root README.md and packages/codeql-action/README.md with language detection, configuration, and tables.
• Misc
  • Normalize repo-configs/lll.js style; minor log formatting in shared/scripts/check-packages.js.

^{Written by Cursor Bugbot for commit d23dfa2. This will update automatically on new commits. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	ejs@​3.1.10

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

• minimatch@5.1.6
• ejs@3.1.10
• jake@10.9.4

View full report

[witmicko]

@SocketSecurity ignore npm/babel-plugin-istanbul@6.1.1
@SocketSecurity ignore npm/fb-watchman@2.0.2
@SocketSecurity ignore npm/jake@10.9.4
@SocketSecurity ignore npm/jest-haste-map@29.7.0
@SocketSecurity ignore npm/jest-worker@29.7.0
@SocketSecurity ignore npm/update-browserslist-db@1.1.4

well known dev deps

[witmicko]

@SocketSecurity ignore npm/ejs@3.1.10
@SocketSecurity ignore npm/minimatch@5.1.6

[cursor]

Bug: Jest Version Mismatch Causes Installation Failure

Jest and @types/jest are updated to versions 30.2.0 and 30.0.0 respectively in package.json. Jest v30.x does not exist yet, with the latest stable release being in the 29.x series. This will cause dependency installation to fail.

Additional Locations (1)

• packages/language-detector/package.json#L15-L17

 

[EllusionN]

Only reviewed for aspects that impacted the external interface. Nothing notable is in this PR so we can proceed to the next stage and do a deeper implementation review once ready to open the final PRs.