Upgrade CI actions and project dependencies

[dsanchezcr]

Bumps actions/checkout from v6 to v7 across CI, CodeQL, and dependency review workflows, and updates the devcontainer Docker-in-Docker feature to v4. Also refreshes frontend and API dependency versions (notably Radix UI, Tailwind, Playwright, ESLint/TypeScript tooling, Azure Functions packages, and Node types) to keep the stack current and aligned with newer toolchain releases.

Purpose

• ...

Does this introduce a breaking change?

[ ] Yes
[ ] No

Pull Request Type

What kind of change does this Pull Request introduce?

[ ] Bugfix
[ ] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Documentation content changes
[ ] Other... Please describe:

How to Test

• Get the code

git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install

• Test the code

What to Check

Verify that the following are valid

• ...

Other Information

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

View full job summary

[Copilot]

Pull request overview

This PR updates CI/devcontainer tooling and refreshes frontend/API npm dependencies to keep the project aligned with newer ecosystem releases (GitHub Actions, Dev Containers features, and JS/TS packages).

Changes:

• Bumped actions/checkout to v7 across CI, CodeQL, and dependency-review workflows.
• Updated devcontainer Docker-in-Docker feature to :4.
• Refreshed frontend and API dependency versions (Radix UI, Tailwind toolchain, Playwright, ESLint/TypeScript tooling, Azure Functions packages, Node types) and updated lockfiles accordingly.

Show a summary per file

File	Description
package.json	Updates frontend/runtime tooling deps (Radix UI, Tailwind, Playwright, ESLint/TS) including @types/node.
package-lock.json	Lockfile updates reflecting the dependency refresh (includes new resolved/integrity entries).
api/package.json	Updates API deps (@azure/functions) and dev tooling (@types/node, core tools).
api/package-lock.json	Lockfile updates for the API dependency refresh (includes new resolved/integrity entries).
.github/workflows/dependency-review.yml	Bumps checkout action to v7.
.github/workflows/codeql.yml	Bumps checkout action to v7.
.github/workflows/ci-cd.yml	Bumps checkout action to v7 across multiple jobs.
.devcontainer/devcontainer.json	Updates Docker-in-Docker devcontainer feature to major :4.

Review details

Files not reviewed (1)

• api/package-lock.json: Generated file

• Files reviewed: 6/8 changed files
• Comments generated: 3
• Review effort level: Low

[github-actions]

Azure Static Web Apps: Your stage site is ready! Visit it here: https://black-cliff-03b41b10f-78.eastus2.7.azurestaticapps.net