dependabot[bot]
|
ff4783f1e4
|
chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1 (#40894)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-06-09 10:30:30 -07:00 |
|
dependabot[bot]
|
7a3b8f49c7
|
chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#40892)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: hainenber <dotronghai96@gmail.com>
|
2026-06-10 00:25:41 +07:00 |
|
Evan Rusackas
|
c58408d76c
|
fix(revert 40875): "ci: authenticate Docker Hub pulls for service containers" failed (#40879)
|
2026-06-09 11:17:59 +07:00 |
|
Evan Rusackas
|
fb0e7fecaf
|
ci: authenticate Docker Hub pulls for service containers (#40875)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-06-09 08:57:31 +07:00 |
|
Evan Rusackas
|
7eaaffde89
|
ci: cache npm downloads in the translations workflow (#40779)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-06-05 13:22:20 -07:00 |
|
Evan Rusackas
|
0984839788
|
ci: required-check anchors for cypress-matrix and playwright-tests (unblock docs-only PRs) (#40780)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-06-05 13:17:41 -07:00 |
|
Evan Rusackas
|
79c74af2e9
|
ci: cache npm downloads in frontend-heavy workflows (#40744)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-06-04 13:34:35 -07:00 |
|
Evan Rusackas
|
80a3df3550
|
ci: run full Python-version matrix on push, current-only on PRs (#40722)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-06-04 21:17:29 +02:00 |
|
Evan Rusackas
|
8dcc7e7eec
|
ci: stable required-check anchors for skippable matrix test jobs (#40772)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-06-04 09:50:06 -07:00 |
|
Evan Rusackas
|
ff5e43c8a0
|
ci: add timeout-minutes to compute-heavy workflow jobs (#40743)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-06-04 09:47:55 -07:00 |
|
Evan Rusackas
|
696705794b
|
ci: gate docker image builds at the job level (#40723)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-06-03 15:39:01 -07:00 |
|
Evan Rusackas
|
5ba60d51fd
|
ci: gate CodeQL analysis at the job level for docs-only PRs (#40724)
|
2026-06-03 23:49:59 +02:00 |
|
Evan Rusackas
|
cf5307d0c6
|
ci: reduce Cypress parallelism from 6 shards to 2 (#40717)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-06-03 23:48:46 +02:00 |
|
Shaitan
|
43fde2fb07
|
fix(charts): enforce DISALLOWED_SQL_FUNCTIONS and DISALLOWED_SQL_TABLES at chart-data execution (#40567)
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-06-03 21:52:48 +01:00 |
|
Evan Rusackas
|
c373da1bb9
|
ci: add cancel-in-progress concurrency to PR helper workflows (#40725)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-06-03 12:44:36 -07:00 |
|
Evan Rusackas
|
e5c7200551
|
ci: gate expensive test workflows at the job level (#40718)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-06-03 10:04:10 -07:00 |
|
Evan Rusackas
|
c914df5a67
|
ci: harden CI against Docker Hub registry flakes (retries + auth) (#40700)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-03 19:53:24 +07:00 |
|
Evan Rusackas
|
3bbb35e8a3
|
ci(bashlib): drop the dead bc-based NONCE (perf + reliability) (#40691)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-02 16:49:49 -07:00 |
|
Ville Brofeldt
|
74d1c83ec5
|
ci: preserve PR translation updates during regression checks (#40581)
|
2026-06-01 15:54:20 -07:00 |
|
Joe Li
|
a33fcb0edd
|
feat: add embedded dashboard E2E tests to Playwright CI (#39300)
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
2026-06-01 09:42:08 -07:00 |
|
Evan Rusackas
|
7e8b8e25a5
|
chore(ci): resolve remaining GitHub Actions static-analysis findings (#40556)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-31 17:55:26 +07:00 |
|
Evan Rusackas
|
c7bbfff475
|
fix(ci): gate welcome message on first-time contributor association (#40543)
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-05-31 10:39:38 +07:00 |
|
Đỗ Trọng Hải
|
2d6e68b5f2
|
fix(ci): remove deprecated ephemeral env workflows + resolve fixable GHA-related security issues (#40121)
Signed-off-by: hainenber <dotronghai96@gmail.com>
Co-authored-by: Evan Rusackas <evan@preset.io>
|
2026-05-30 14:09:46 +07:00 |
|
Evan Rusackas
|
2e7bec3646
|
chore(ci): harden GitHub Actions workflows per static analysis (#40545)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-30 13:13:43 +07:00 |
|
Evan Rusackas
|
f165c3fa78
|
fix(ci): grant security-events write to GHA validator workflow (#40539)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-29 21:46:54 -07:00 |
|
Evan Rusackas
|
16b56873b0
|
fix(ci): restrict workflow_run jobs to trusted origins and add zizmor audit (#40533)
Co-authored-by: Claude Code <noreply@anthropic.com>
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com>
|
2026-05-30 11:11:40 +07:00 |
|
Đỗ Trọng Hải
|
b8ea4448d6
|
feat(ci): perform static security analysis for GHA workflows (#40510)
Signed-off-by: hainenber <dotronghai96@gmail.com>
|
2026-05-29 20:15:14 -07:00 |
|
Evan Rusackas
|
b0da0cf202
|
chore(ci): update GHA actions to Node.js 24-compatible versions (#40477)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-29 11:12:41 +07:00 |
|
Nishita Matlani
|
ec09cec6bd
|
fix(ci): correct first-interaction inputs in welcome workflow (#40508)
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com>
|
2026-05-29 10:53:38 +07:00 |
|
dependabot[bot]
|
6bd1b46216
|
chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 (#40458)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-27 15:28:06 -07:00 |
|
dependabot[bot]
|
03d25277ba
|
chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#40417)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-25 19:07:14 -07:00 |
|
Evan Rusackas
|
9c90a6854c
|
ci(translations): hard-block translation regressions in CI (#39443)
Co-authored-by: Claude Code <noreply@anthropic.com>
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com>
|
2026-05-23 16:30:14 -07:00 |
|
Evan Rusackas
|
2fa3bbd91c
|
chore(ci): limit /app/prefix matrix variant to master merges (#40385)
Co-authored-by: Claude <claude@anthropic.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-05-22 21:11:21 -07:00 |
|
Evan Rusackas
|
838ac8f553
|
fix(ci): stop cancelling Hold Label Check runs (#40380)
Co-authored-by: Claude <claude@anthropic.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-05-22 21:10:23 -07:00 |
|
Evan Rusackas
|
8d985d223b
|
ci(e2e): run backend under gunicorn instead of flask dev server (#40234)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-22 21:09:14 -07:00 |
|
dependabot[bot]
|
ffbce27c9b
|
chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 (#40269)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-19 21:51:40 -07:00 |
|
dependabot[bot]
|
f47300102c
|
chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 (#40218)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-18 06:26:20 -07:00 |
|
Evan Rusackas
|
672e9a1477
|
fix(docs): tighten onBrokenLinks to throw and fix surfaced broken links (#40102)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-14 11:07:18 -07:00 |
|
Arpit Jain
|
62dc237014
|
chore(ci): add explicit permissions to additional workflows (#40067)
|
2026-05-14 23:24:46 +07:00 |
|
dependabot[bot]
|
5d40d8aeac
|
chore(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 (#40016)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-13 09:33:14 -07:00 |
|
Evan Rusackas
|
658907a0a6
|
fix(gha): use sound condition gating for latest-tag step (#40035)
Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-12 22:27:26 +07:00 |
|
Evan Rusackas
|
5ab8583cd0
|
chore(gha): pin github/codeql-action to a SHA (#40043)
Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-11 20:18:55 -07:00 |
|
Evan Rusackas
|
e66fbc91c2
|
chore(gha): pass commenter login through env in claude.yml (#40042)
Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-11 20:00:27 -07:00 |
|
Evan Rusackas
|
e77f6ece92
|
fix(ci): serialize Docs Deployment runs to avoid push races (#40030)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-11 11:25:31 -07:00 |
|
dependabot[bot]
|
d3c44e311e
|
chore(deps): bump aws-actions/amazon-ecr-login from 2.1.4 to 2.1.5 (#39931)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-07 21:54:59 +07:00 |
|
Beto Dealmeida
|
cb53745d43
|
feat: semantic layer extension (#37815)
|
2026-05-05 12:07:46 -04:00 |
|
dependabot[bot]
|
1ac113fd44
|
chore(deps): bump aws-actions/amazon-ecs-render-task-definition from 1.8.4 to 1.8.5 (#39809)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-01 06:31:48 -07:00 |
|
dependabot[bot]
|
de45f3a928
|
chore(deps): bump aws-actions/amazon-ecs-deploy-task-definition from 2.6.1 to 2.6.2 (#39806)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-01 09:30:49 -04:00 |
|
Joe Li
|
7842a9b05d
|
fix(playwright): remove Google Sheets dependency from dataset tests (#39143)
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
2026-04-30 06:18:50 -07:00 |
|
dependabot[bot]
|
4c4f3341de
|
chore(deps): bump dawidd6/action-download-artifact from 20 to 21 (#39742)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-29 16:01:28 -04:00 |
|