Feature/advanced ci pipeline

[Madhavi1108]

Description

This PR enhances the project's CI/CD pipeline by introducing production-grade GitHub Actions optimizations, stronger security defaults, improved dependency caching, concurrency control, and execution safeguards.

The updated workflow is designed to provide faster feedback, reduce unnecessary runner usage, improve reliability for monorepo builds, and ensure consistent validation across both the frontend and backend.

Closes #42

Type of Change

• Enhancement
• Bug fix
• Documentation update
• Refactoring

Checklist

• Code follows project style
• Tested locally
• Updated documentation

---

Changes Made

Concurrency Control

Added a concurrency configuration to the GitHub Actions workflow.

This enables:

• Automatic cancellation of outdated workflow runs

• Prevention of duplicate CI executions for the same pull request

• Reduced GitHub Actions runner consumption

• Faster feedback for contributors pushing multiple commits

---

Restricted Workflow Permissions

Configured the workflow with:

permissions:
  contents: read

This follows the principle of least privilege by ensuring:

• Read-only repository access

• Prevention of unintended repository modifications

• Improved security posture for CI execution

---

Improved Python Dependency Caching

Updated the Python setup to use:

cache-dependency-path: backend/requirements.txt

This ensures:

• Accurate cache invalidation when backend dependencies change

• Proper pip cache reuse in a monorepo structure

• Faster backend installation times

• Elimination of silent cache misses caused by root-level lookups

---

Job Timeout Protection

Added explicit timeout-minutes values for CI jobs.

Benefits include:

• Prevention of indefinitely hanging workflows

• Better GitHub Actions resource utilization

• Automatic termination of stalled builds

• More predictable CI execution times

---

End-to-End Validation Pipeline

Verified the complete CI workflow against the project's local development environment.

Successfully executed:

• ESLint

• Vitest frontend test suite

• TypeScript type checking (tsc)

• Python backend unit tests (unittest)

All validation steps completed successfully with zero errors.

---

Files Updated

GitHub Actions

• .github/workflows/ci.yml

---

User Experience Improvements

Contributors

Benefit from:

• Faster CI feedback

• Automatic cancellation of obsolete runs

• Reduced waiting time for pull request validation

Maintainers

Benefit from:

• Improved workflow security

• More reliable dependency caching

• Better resource management

• Lower GitHub Actions runner usage

Platform

Benefits from:

• Stable frontend validation

• Stable backend validation

• Predictable workflow execution

• Production-ready CI configuration

---

How Has This Been Tested?

Frontend Validation

Successfully verified:

• ESLint execution

• Vitest test suite

• TypeScript compilation

• Zero frontend errors

Backend Validation

Successfully verified:

• Python dependency installation

• Backend unit tests using:

python -m unittest discover -s tests

• Zero backend test failures

Workflow Validation

Verified:

• Concurrency configuration behaves correctly

• Permission restrictions apply successfully

• Monorepo pip caching resolves using backend/requirements.txt

• Job timeout configuration is valid

Local Verification

Executed:

npm run test

pip install -r requirements.txt
python -m unittest discover -s tests

All checks completed successfully.

---

Acceptance Criteria

• CI automatically cancels outdated workflow runs

• Workflow operates with least-privilege permissions

• Python dependency caching works correctly in a monorepo setup

• Jobs terminate automatically when exceeding configured time limits

• Frontend linting passes successfully

• Frontend tests pass successfully

• TypeScript type checking passes successfully

• Backend unit tests pass successfully

• CI pipeline remains stable and production-ready

Technical Notes

• The addition of GitHub Actions concurrency prevents multiple outdated builds from executing simultaneously, improving resource efficiency and reducing queue times for active pull requests.

• Restricting workflow permissions to contents: read strengthens repository security by minimizing the default capabilities of the GitHub Actions token.

• Configuring cache-dependency-path: backend/requirements.txt ensures that Python dependency caching functions correctly in the project's monorepo structure, avoiding silent cache misses.

• Explicit job timeouts provide protection against stalled workflows and improve overall CI reliability while maintaining predictable execution behavior.

• The updated pipeline has been verified locally through ESLint, Vitest, TypeScript compilation, and backend unit tests, confirming compatibility with the current project state.

[vercel]

@Madhavi1108 is attempting to deploy a commit to the sushma-1706's projects Team on Vercel.

A member of the Team first needs to authorize it.

[Madhavi1108]

Hi @Sushma-1706,
I have completed the issue.
Kindly let me know if any changes are needed from my side

[Madhavi1108]

Hi @Sushma-1706 ,
Just a brief follow up
Are there any changes needed to be done from my side for this issue