Fix CodeQL workflow: invalid matrix context in job-level if condition

[Copilot]

CodeQL has been failing since Dec 21, 2025 with 0 jobs on every run — GitHub's signature for a workflow parse/validation error, not a job failure.

Two sequential bugs introduced the breakage:

• PR Refactor CodeQL workflow to use exclude_paths #82 replaced paths-ignore with exclude_paths, which is not a valid GitHub Actions key
• A subsequent "fix" corrected that but introduced a new invalid pattern — referencing matrix.* in a job-level if condition:

# INVALID: matrix context is not available at jobs.<job_id>.if
analyze:
  needs: detect
  if: matrix.language != 'python' || needs.detect.outputs.python_changed == 'true'

GitHub Actions only allows matrix.* in step-level if and a few other specific contexts — not jobs.<job_id>.if. This causes an immediate parse failure: Unrecognized named-value: 'matrix'.

Changes:

• Removed the detect job (which existed solely to feed the broken conditional)
• Removed needs: detect and the invalid if condition from analyze
• The paths: trigger (the valid replacement for paths-ignore) is preserved

All three language analyses (actions, javascript-typescript, python) now run unconditionally when the path filter triggers the workflow.

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.