feat(api): add monitoring feature with track_events use case

- features/monitoring: new feature module + track_events endpoint
- app.py / authentication / config: wire up monitoring + tweaks
- features/todo/use_cases: minor adjustments
- Dockerfile + install-equinor-certificates.sh: build infra
- openapi.json + uv.lock + pyproject: dependency updates

Author: eoaksnes

.github/dependabot.yml

@@ -1,87 +1,59 @@
 version: 2
-
 registries:
   dhi-io:
     type: docker-registry
     url: https://dhi.io
     username: ${{secrets.DHI_USERNAME}}
     password: ${{secrets.DHI_PASSWORD}}
-
 updates:
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    groups:
-      actions:
-        update-types:
-          - "minor"
-          - "patch"
+  - package-ecosystem: "npm"
+    directories:
+      - "/web"
     schedule:
       interval: "monthly" # when template is used, recommended interval is "weekly"
-    cooldown:
-      default-days: 7
-
-  - package-ecosystem: "pre-commit"
-    directory: "/"
     groups:
-      pre-commit:
+      web:
+        exclude-patterns:
+          - "@hey-api/openapi-ts"
         update-types:
           - "minor"
           - "patch"
-    schedule:
-      interval: "monthly" # when template is used, recommended interval is "weekly"
-    cooldown:
-      default-days: 7
+      openapi-ts:
+        patterns:
+          - "@hey-api/openapi-ts"
 
   - package-ecosystem: "docker"
     directories:
-      - "/api"
       - "/web"
+      - "/api"
     registries:
       - dhi-io
+    schedule:
+      interval: "monthly" # when template is used, recommended interval is "weekly"
     groups:
       dockerfile:
         update-types:
           - "minor"
           - "patch"
-    schedule:
-      interval: "monthly" # when template is used, recommended interval is "weekly"
-    cooldown:
-      default-days: 7
 
   - package-ecosystem: "uv"
-    directory: "/api"
-    groups:
-      api:
-        update-types:
-          - "minor"
-          - "patch"
+    directories:
+      - "/docs"
+      - "/api"
     schedule:
       interval: "monthly" # when template is used, recommended interval is "weekly"
-    cooldown:
-      default-days: 7
-
-  - package-ecosystem: "uv"
-    directory: "/docs"
     groups:
       docs:
         update-types:
           - "minor"
           - "patch"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
     schedule:
       interval: "monthly" # when template is used, recommended interval is "weekly"
-    cooldown:
-      default-days: 7
 
-  - package-ecosystem: "npm"
-    directory: "/web"
-    groups:
-      web:
-        update-types:
-          - "minor"
-          - "patch"
-        exclude-patterns:
-          - "@hey-api/openapi-ts"
+  - package-ecosystem: "pre-commit"
+    directory: "/"
     schedule:
       interval: "monthly" # when template is used, recommended interval is "weekly"
-    cooldown:
-      default-days: 7

.github/release-please-config.json

@@ -1,10 +1,10 @@
 {
-	"$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
-	"packages": {
-		".": {
-			"release-type": "simple",
-			"changelog-path": "docs/docs/changelog/changelog.md",
-			"extra-files": ["web/package.json"]
-		}
-	}
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+  "packages": {
+    ".": {
+      "release-type": "simple",
+      "changelog-path": "docs/docs/changelog/changelog.md",
+      "extra-files": ["web/package.json"]
+    }
+  }
 }

.github/release-please-manifest.json

@@ -1 +1 @@
-{ ".": "1.5.0" }
+{".":"1.5.0"}

.github/workflows/deploy-to-radix.yaml

@@ -35,13 +35,13 @@ jobs:
   deploy-on-radix:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@v6
 
       # You'll need an app registration with a Federated Credential for this to
       # work. Note that the credential will need to specify a branch name. This
       # step will therefore fail for all branches not mentioned in the credentials
       - name: Az CLI login
-        uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 # v3.0.0
+        uses: azure/login@v3
         with:
           client-id: 4a761bec-628d-4c4b-860a-4903cbecc963 #app registration Application ID
           tenant-id: 3aa4a235-b6e2-48d5-9195-7fcf05b459b0
@@ -56,7 +56,7 @@ jobs:
           echo "APP_SERVICE_ACCOUNT_TOKEN=$token" >> $GITHUB_ENV
 
       - name: Deploy on Radix
-        uses: equinor/radix-github-actions@b23674a56b82a1da783b507bc7f15e7ca7067dd8 # v2.0.2
+        uses: equinor/radix-github-actions@v2
         env:
           APP_SERVICE_ACCOUNT_TOKEN: ${{ env.APP_SERVICE_ACCOUNT_TOKEN }}
         with:

.github/workflows/linting-and-checks.yaml

@@ -21,14 +21,14 @@ jobs:
     name: "pre-commit"
     steps:
       - name: "Setup: checkout repository"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@v6
 
       - name: "Setup: Runtimes"
-        uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1
+        uses: jdx/mise-action@v4
         timeout-minutes: 5
 
       - name: "Run: pre-commit"
-        uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
+        uses: pre-commit/action@v3.0.1
         with:
           extra_args: --all-files
 
@@ -40,14 +40,14 @@ jobs:
         working-directory: ./api
     steps:
       - name: "Setup: checkout repository"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@v6
 
       - name: "Setup: Runtimes"
-        uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1
+        uses: jdx/mise-action@v4
         timeout-minutes: 5
 
       - name: "Setup: install uv"
-        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        uses: astral-sh/setup-uv@v7
         with:
           enable-cache: true
 
@@ -65,21 +65,21 @@ jobs:
         working-directory: ./web
     steps:
       - name: "Setup: check out repository"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@v6
         with:
           sparse-checkout: |
             .github
             .mise
             web
 
       - name: Cache dependencies
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@v5
         with:
           key: ${{ runner.os }}-yarn-${{ hashFiles('**/yarn.lock') }}
           path: /home/runner/.yarn/berry/cache
 
       - name: "Setup: Runtimes"
-        uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1
+        uses: jdx/mise-action@v4
         timeout-minutes: 5
 
       - name: "Run: compile"
@@ -90,7 +90,7 @@ jobs:
     name: "validate Radix config"
     steps:
       - name: "Setup: checkout repository"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: equinor/radix-github-actions@b23674a56b82a1da783b507bc7f15e7ca7067dd8 # v2.0.2
+        uses: actions/checkout@v6
+      - uses: equinor/radix-github-actions@v2
       - name: "Run: validate radix config"
         run: rx validate radix-config

.github/workflows/publish-docs.yaml

@@ -13,10 +13,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@v6
 
       - name: Install uv
-        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies and build website
         run: |

.github/workflows/publish-image.yaml

@@ -20,12 +20,12 @@ jobs:
   build-and-publish-nginx-main:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 2
 
       - name: "Login to image registry"
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -58,12 +58,12 @@ jobs:
   build-and-publish-api-main:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 2
 
       - name: "Login to image registry"
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}

.github/workflows/release-please.yaml

@@ -14,20 +14,20 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - name: Create token
-        id: create-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+      - name: Generate token
+        id: generate-token
+        uses: actions/create-github-app-token@v3
         with:
-          client-id: ${{ vars.APP_ID }}
+          app-id: ${{ vars.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
 
       - name: release-please
         id: release-please
-        uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
+        uses: googleapis/release-please-action@v5
         with:
           config-file: .github/release-please-config.json
           manifest-file: .github/release-please-manifest.json
-          token: ${{ steps.create-token.outputs.token }}
+          token: ${{ steps.generate-token.outputs.token }}
     outputs:
       release_created: ${{ steps.release-please.outputs.release_created }}
       tag_name: ${{ steps.release-please.outputs.tag_name }}

.github/workflows/rollback.yaml

@@ -25,7 +25,7 @@ jobs:
           ]
     steps:
       - name: "Login to image registry"
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}

.github/workflows/tests.yaml

@@ -18,28 +18,24 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Setup: checkout repository"
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@v6
 
       - name: "Setup: install uv"
-        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        uses: astral-sh/setup-uv@v7
         with:
           enable-cache: true
 
-      - name: "Setup: install dependencies"
-        working-directory: ./api
-        run: uv sync --locked
-
       - name: "Run: pytest unit tests"
         working-directory: ./api
         run: uv run pytest --unit
 
   api-integration-tests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@v6
 
       - name: Login to image registry
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -60,10 +56,10 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ false }} # disable for now as they do not currently work
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@v6
 
       - name: Login to image registry
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -85,12 +81,12 @@ jobs:
     steps:
       # If you know your docs does not rely on anything outside of the documentation folder, the commented out code below can be used to only test the docs build if the documentation folder changes.
       - name: Checkout GitHub Action
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@v6
         # with:
         #   fetch-depth: 0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies and build website
         # if: steps.docs-changes.outputs.changes > 0