refactor: Package dependencies for indy-charts

.devcontainer/devcontainer.json

@@ -2,7 +2,7 @@
   "name": "Dev Container",
   "image": "mcr.microsoft.com/devcontainers/base:bookworm",
   "features": {
-    "ghcr.io/devcontainers/features/node:1": {
+    "ghcr.io/devcontainers/features/node:2": {
       "version": "24"
     },
     "ghcr.io/devcontainers/features/dotnet:2": {
@@ -31,8 +31,8 @@
         "dotjoshjohnson.xml",
         "EditorConfig.EditorConfig",
         "esbenp.prettier-vscode",
-        "GitHub.copilot-chat",
         "GitHub.vscode-github-actions",
+        "mikestead.dotenv",
         "ms-azuretools.vscode-azurefunctions",
         "ms-azuretools.vscode-azurestorage",
         "ms-azuretools.vscode-containers",

.devcontainer/post-create.sh

@@ -32,5 +32,13 @@ ng config -g cli.completion.prompted true
 echo "📦 Installing Node dependencies..."
 pnpm install --frozen-lockfile --loglevel=error --config.confirmModulesPurge=false
 
+# Bootstrap local.settings.json if absent (safe — never overwrites existing file with credentials)
+SETTINGS_FILE="${REPO_ROOT}/server/Functions/local.settings.json"
+SETTINGS_EXAMPLE="${REPO_ROOT}/server/Functions/local.settings.example.json"
+if [ ! -f "${SETTINGS_FILE}" ]; then
+  cp "${SETTINGS_EXAMPLE}" "${SETTINGS_FILE}"
+  echo "📄 Created server/Functions/local.settings.json from example (fill in ALPACA_KEY and ALPACA_SECRET if needed)"
+fi
+
 # cleanup
 sudo apt-get autoremove --purge -y

.editorconfig

@@ -14,6 +14,7 @@ double_quote_style = double       # Use double quotes for strings
 
 # Markdown files
 [*.md]
+max_line_length = off
 trim_trailing_whitespace = false
 
 # JSON, XML, and .NET projects
@@ -30,6 +31,7 @@ end_of_line = crlf                # Use CRLF for Windows specific files
 indent_size = 4                   # Use 4 spaces for .NET files
 tab_width = 4                     # Set tab width to 4 spaces
 
+# .NET and C# style and code analyis settings
 dotnet_sort_system_directives_first = true               # Place System.* usings before others
 dotnet_separate_import_directive_groups = false          # Don't add blank lines between using directives
 dotnet_style_prefer_single_quotes = false:suggestion     # Prefer double quotes
@@ -44,5 +46,5 @@ csharp_style_expression_bodied_methods = true:silent     # Allow expression-bodi
 csharp_style_expression_bodied_properties = true:silent  # Allow expression-bodied properties
 
 # Diagnostic overrides
-dotnet_diagnostic.IDE0058.severity = none     # Disable "use '_' discard" value warnings
-dotnet_diagnostic.CA1873.severity = warning   # Avoid potentially expensive logging
+dotnet_diagnostic.IDE0058.severity = none                # Disable "use '_' discard" value warnings
+dotnet_diagnostic.CA1873.severity = warning              # Avoid potentially expensive logging

.github/workflows/ci.yml

@@ -1,9 +1,8 @@
 name: "CI"
 
 on:
-  push:
-    branches: ["main"]
   pull_request:
+  push:
     branches: ["main"]
 
 concurrency:
@@ -21,10 +20,8 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Checkout
+      - name: Checkout sources
         uses: actions/checkout@v6
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup .NET
         uses: actions/setup-dotnet@v5
@@ -81,7 +78,7 @@ jobs:
 
       - name: Upload backend coverage artifacts
         if: github.event_name == 'pull_request' && (success() || failure())
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: backend-coverage-report
           path: |
@@ -97,7 +94,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
         with:
           run_install: false
 
@@ -145,7 +142,7 @@ jobs:
 
       - name: Upload coverage artifacts
         if: github.event_name == 'pull_request' && always()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: code-coverage-reports
           path: |

.github/workflows/copilot-setup-steps.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Checkout
+      - name: Checkout sources
         uses: actions/checkout@v6
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -29,9 +29,7 @@ jobs:
         continue-on-error: true
 
       - name: Install .NET tools
-        run: |
-          dotnet tool install --global dotnet-format
-          dotnet tool install --global dotnet-outdated-tool
+        run: dotnet tool restore
         continue-on-error: true
 
       - name: Build .NET Solution
@@ -41,7 +39,7 @@ jobs:
         continue-on-error: true
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
         with:
           run_install: false
         continue-on-error: true

.github/workflows/deploy-website.yml

@@ -41,7 +41,7 @@ jobs:
       url: https://charts.stockindicators.dev
 
     steps:
-      - name: Checkout
+      - name: Checkout sources
         uses: actions/checkout@v6
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -86,15 +86,15 @@ jobs:
 
       - name: Save Web API
         if: github.ref == 'refs/heads/main'
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: api
           path: "server/artifacts/api"
           include-hidden-files: true
 
       - name: Save Functions
         if: github.ref == 'refs/heads/main'
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: fns
           path: "server/artifacts/fns"
@@ -113,7 +113,7 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
         with:
           run_install: false
 
@@ -145,7 +145,7 @@ jobs:
         run: pnpm --filter @stock-charts/client run build.prod
 
       - name: Save artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: web
           path: client/dist/app/browser
@@ -166,20 +166,20 @@ jobs:
     steps:
       - name: Download Functions package
         if: github.ref == 'refs/heads/main'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: fns
           path: artifacts/fns
 
       - name: Download API package
         if: github.ref == 'refs/heads/main'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: api
           path: artifacts/api
 
       - name: Download Web package
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: web
           path: artifacts/web
@@ -202,7 +202,7 @@ jobs:
 
       - name: Publish to Cloudflare Pages
         id: deploy
-        uses: cloudflare/wrangler-action@v3
+        uses: cloudflare/wrangler-action@v4
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_KEY }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}

.github/workflows/publish-chartjs-financial.yml

@@ -6,7 +6,6 @@ on:
       - main
     paths:
       - 'libs/chartjs-financial/**'
-      - 'libs/chartjs-financial/package.json'
   workflow_dispatch: {}
 
 concurrency:
@@ -27,22 +26,21 @@ jobs:
     environment: pkg.github.com
 
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - name: Checkout sources
+        uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1
+        uses: pnpm/action-setup@v6
         with:
           run_install: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: pnpm
           cache-dependency-path: pnpm-lock.yaml
           registry-url: https://npm.pkg.github.com
-          scope: "@facioquo"
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
@@ -60,10 +58,6 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          # Ensure pnpm can authenticate to GitHub Packages
-          echo "@facioquo:registry=https://npm.pkg.github.com" > .npmrc
-          echo "//npm.pkg.github.com/:_authToken=${NODE_AUTH_TOKEN}" >> .npmrc
-
           PACKAGE_VERSION=$(jq -r '.version' package.json)
           PACKAGE_NAME=$(jq -r '.name' package.json)
 
@@ -77,5 +71,5 @@ jobs:
             echo "Version $PACKAGE_VERSION already published; skipping publish."
           else
             echo "Publishing $PACKAGE_NAME@$PACKAGE_VERSION with tag '$NPM_TAG'"
-            pnpm publish --no-git-checks --access restricted --tag "$NPM_TAG"
+            pnpm publish --no-git-checks --tag "$NPM_TAG"
           fi

.github/workflows/publish-indy-charts.yml

@@ -6,7 +6,6 @@ on:
       - main
     paths:
       - 'libs/indy-charts/**'
-      - 'libs/indy-charts/package.json'
   workflow_dispatch: {}
 
 concurrency:
@@ -27,22 +26,21 @@ jobs:
     environment: pkg.github.com
 
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+      - name: Checkout sources
+        uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1
+        uses: pnpm/action-setup@v6
         with:
           run_install: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: pnpm
           cache-dependency-path: pnpm-lock.yaml
           registry-url: https://npm.pkg.github.com
-          scope: "@facioquo"
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
@@ -63,10 +61,6 @@ jobs:
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          # Ensure pnpm can authenticate to GitHub Packages
-          echo "@facioquo:registry=https://npm.pkg.github.com" > .npmrc
-          echo "//npm.pkg.github.com/:_authToken=${NODE_AUTH_TOKEN}" >> .npmrc
-
           PACKAGE_VERSION=$(jq -r '.version' package.json)
           PACKAGE_NAME=$(jq -r '.name' package.json)
 
@@ -80,5 +74,5 @@ jobs:
             echo "Version $PACKAGE_VERSION already published; skipping publish."
           else
             echo "Publishing $PACKAGE_NAME@$PACKAGE_VERSION with tag '$NPM_TAG'"
-            pnpm publish --no-git-checks --access restricted --tag "$NPM_TAG"
+            pnpm publish --no-git-checks --tag "$NPM_TAG"
           fi

.vscode/extensions.json

@@ -16,8 +16,8 @@
     "dotjoshjohnson.xml",
     "EditorConfig.EditorConfig",
     "esbenp.prettier-vscode",
-    "GitHub.copilot-chat",
     "GitHub.vscode-github-actions",
+    "mikestead.dotenv",
     "ms-azuretools.vscode-azurefunctions",
     "ms-azuretools.vscode-azurestorage",
     "ms-azuretools.vscode-containers",