CodeQL updates #196

# to view logs

	# Does security scanning of the raw TS and of compiled Java. No Swift support
	# except on macOS runners.
	name: "CodeQL"

	on:
	push:
	branches: [main, ]
	pull_request:
	# The branches below must be a subset of the branches above
	branches: [main]
	schedule:
	- cron: '0 5 * * 0'

	jobs:
	analyse-ts:
	name: Analyze TypeScript
	runs-on: ubuntu-latest
	steps:
	- name: Setup Node
	uses: actions/setup-node@v4
	with:
	node-version: '22'
	- name: Checkout repository
	uses: actions/checkout@v4
	with:
	# We must fetch at least the immediate parents so that if this is
	# a pull request then we can checkout the head.
	fetch-depth: 2
	- name: Globally install Ionic and Capacitor
	run: npm install -g @ionic/cli @capacitor/cli
	- name: Install dependencies
	run: npm install
	- name: Initialize CodeQL
	uses: github/codeql-action/init@v3
	with:
	build-mode: none
	languages: javascript # includes TS

	analyse-java:
	name: Analyse Java
	runs-on: ubuntu-latest
	steps:
	- name: Setup Java JDK
	uses: actions/setup-java@v4
	with:
	java-version: '21'
	distribution: 'adopt'
	- name: Setup Node
	uses: actions/setup-node@v4
	with:
	node-version: '22'
	- name: Checkout repository
	uses: actions/checkout@v4
	with:
	fetch-depth: 2
	- name: Globally install Ionic and Capacitor
	run: npm install -g @ionic/cli @capacitor/cli
	- name: Install dependencies
	run: npm install
	- name: Ionic build android
	run: ionic cap build android --no-open
	- name: Initialize CodeQL
	uses: github/codeql-action/init@v3
	with:
	build-mode: autobuild
	languages: java
	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v3

Provide feedback