• Resolves: #

Summary

Only run the CodeQL workflow for changes relevant to the analyzers configured here:

• GitHub Actions
• JavaScript / TypeScript

PHP is covered by other tooling, so there is no need to run this workflow on unrelated PHP-only changes; in additional the weekly scheduled run remains unfiltered so even anything somehow missed will still ultimately get analyzed.

Changes

Add paths filters for push and pull_request triggers, while keeping the scheduled run unchanged.

Benefit

This reduces unnecessary CI runs and noise on unrelated PRs.

TODO

• Confirm required status and/or wrap

Checklist

• Code is properly formatted
• Sign-off message is added to all commits
• Tests (unit, integration, api and/or acceptance) are included
• Screenshots before/after for front-end changes
• Documentation (manuals or wiki) has been updated or is not required
• Backports requested where applicable (ex: critical bugfixes)
• Labels added where applicable (ex: bug/enhancement, 3. to review, feature component)
• Milestone added for target branch/version (ex: 32.x for stable32)

AI (if applicable)

• The content of this PR was partly or fully generated using AI