The repo only has Rust source code (no JS/TS). CodeQL v4 fails when a specified language has no code to analyze, which blocks PR #5 (dependabot bumping codeql-action from v3 to v4).
- lint.yml: remove || echo so lint errors actually fail the workflow - typecheck.yml: remove || echo, switch to Bun, add apps/elysia typecheck - update-submodule.yml: upgrade checkout@v6, add payload validation + push retry - security.yml: add Rust to CodeQL scan targets - docker-build-push.yml: remove stale packages/ path refs - All workflows: add timeout-minutes to prevent stuck jobs Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
asepharyana