Update react monorepo #34092

	name: Semgrep

	on:
	# Scan changed files in PRs (diff-aware scanning):
	pull_request: {}

	# Scan mainline, next and `dev/*` trunks to report all findings:
	push:
	branches:
	- main
	- canary
	- dev/*

	schedule:
	- cron: "30 0 1,15 * *" # scheduled for 00:30 UTC on both the 1st and 15th of the month

	jobs:
	semgrep:
	name: Scan

	# Change this in the event of future self-hosting of Action runner:
	runs-on: ubuntu-latest

	container:
	image: returntocorp/semgrep:1.102.0@sha256:cef085245254d15c66d96be413c730f0b458823a1d0c39afbc12f705b664ce8f

	# Skip any PR created by Dependabot to avoid permission issues:
	if: (github.actor != 'dependabot[bot]')

	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	name: Check-out Git project source

	- name: Run Semgrep
	run: semgrep ci --sarif --output=semgrep.sarif \|\| true
	env:
	SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}

	- name: Check SARIF file exists following Semgrep run
	id: sarif_file_check
	uses: andstor/file-existence-action@076e0072799f4942c8bc574a82233e1e4d13e9d6 # v3.0.0
	with:
	files: "semgrep.sarif"

	- name: Upload SARIF file for GitHub Advanced Security Dashboard
	uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
	if: steps.sarif_file_check.outputs.files_exists == 'true'
	with:
	sarif_file: semgrep.sarif

Provide feedback