chore(deps): bump the production-dependencies group with 12 updates #8

	name: Security Audit

	on:
	push:
	branches: [main, pre-deployment]
	pull_request:
	branches: [main]
	schedule:
	# Every Monday at 08:00 UTC
	- cron: '0 8 * * 1'

	jobs:
	audit-frontend:
	name: Frontend — npm audit
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Setup Node
	uses: actions/setup-node@v4
	with:
	node-version: '20'
	cache: 'npm'

	- name: Install dependencies
	run: npm ci

	- name: Run audit (fail on high+)
	run: npm audit --audit-level=high

	audit-backend:
	name: Backend — npm audit
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Setup Node
	uses: actions/setup-node@v4
	with:
	node-version: '20'
	cache: 'npm'
	cache-dependency-path: backend/package-lock.json

	- name: Install backend dependencies
	working-directory: backend
	run: npm ci

	- name: Run audit (fail on high+)
	working-directory: backend
	run: npm audit --audit-level=high

	typecheck:
	name: TypeScript — type check
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Setup Node
	uses: actions/setup-node@v4
	with:
	node-version: '20'
	cache: 'npm'

	- name: Install dependencies
	run: npm ci

	- name: Type check frontend
	run: npx tsc --noEmit

	- name: Install backend deps
	working-directory: backend
	run: npm ci

	- name: Type check backend
	working-directory: backend
	run: npx tsc --noEmit

Provide feedback