Evan Rusackas
|
7e8b8e25a5
|
chore(ci): resolve remaining GitHub Actions static-analysis findings (#40556)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-31 17:55:26 +07:00 |
|
Evan Rusackas
|
c7bbfff475
|
fix(ci): gate welcome message on first-time contributor association (#40543)
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-05-31 10:39:38 +07:00 |
|
Shaitan
|
8e47eb1cc1
|
docs(security): explicit security model, role/capability matrix, AGENTS.md linkage (#40503)
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-30 13:27:00 -07:00 |
|
Đỗ Trọng Hải
|
2d6e68b5f2
|
fix(ci): remove deprecated ephemeral env workflows + resolve fixable GHA-related security issues (#40121)
Signed-off-by: hainenber <dotronghai96@gmail.com>
Co-authored-by: Evan Rusackas <evan@preset.io>
|
2026-05-30 14:09:46 +07:00 |
|
Evan Rusackas
|
2e7bec3646
|
chore(ci): harden GitHub Actions workflows per static analysis (#40545)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-30 13:13:43 +07:00 |
|
Evan Rusackas
|
f165c3fa78
|
fix(ci): grant security-events write to GHA validator workflow (#40539)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-29 21:46:54 -07:00 |
|
Evan Rusackas
|
16b56873b0
|
fix(ci): restrict workflow_run jobs to trusted origins and add zizmor audit (#40533)
Co-authored-by: Claude Code <noreply@anthropic.com>
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com>
|
2026-05-30 11:11:40 +07:00 |
|
Đỗ Trọng Hải
|
b8ea4448d6
|
feat(ci): perform static security analysis for GHA workflows (#40510)
Signed-off-by: hainenber <dotronghai96@gmail.com>
|
2026-05-29 20:15:14 -07:00 |
|
Evan Rusackas
|
b0da0cf202
|
chore(ci): update GHA actions to Node.js 24-compatible versions (#40477)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-29 11:12:41 +07:00 |
|
Nishita Matlani
|
ec09cec6bd
|
fix(ci): correct first-interaction inputs in welcome workflow (#40508)
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com>
|
2026-05-29 10:53:38 +07:00 |
|
dependabot[bot]
|
6bd1b46216
|
chore(deps): bump github/codeql-action from 4.35.5 to 4.36.0 (#40458)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-27 15:28:06 -07:00 |
|
dependabot[bot]
|
03d25277ba
|
chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#40417)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-25 19:07:14 -07:00 |
|
Evan Rusackas
|
9c90a6854c
|
ci(translations): hard-block translation regressions in CI (#39443)
Co-authored-by: Claude Code <noreply@anthropic.com>
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com>
|
2026-05-23 16:30:14 -07:00 |
|
Evan Rusackas
|
2fa3bbd91c
|
chore(ci): limit /app/prefix matrix variant to master merges (#40385)
Co-authored-by: Claude <claude@anthropic.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-05-22 21:11:21 -07:00 |
|
Evan Rusackas
|
838ac8f553
|
fix(ci): stop cancelling Hold Label Check runs (#40380)
Co-authored-by: Claude <claude@anthropic.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-05-22 21:10:23 -07:00 |
|
Evan Rusackas
|
42668cf634
|
ci(docker): pin QEMU binfmt image to stabilize arm64 builds (#40235)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-22 21:09:54 -07:00 |
|
Evan Rusackas
|
8d985d223b
|
ci(e2e): run backend under gunicorn instead of flask dev server (#40234)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-22 21:09:14 -07:00 |
|
Đỗ Trọng Hải
|
91d96419fe
|
feat(sec): delays version-bumping PR to avoid prematurely usage of compromised packages (#39783)
Signed-off-by: hainenber <dotronghai96@gmail.com>
Co-authored-by: Copilot <copilot@github.com>
|
2026-05-22 11:01:10 -07:00 |
|
Shaitan
|
8e98ca6569
|
docs: expand out-of-scope vulnerability definitions (#40332)
|
2026-05-22 21:20:57 +07:00 |
|
Evan Rusackas
|
2cd5efa627
|
ci(deps): bump lower bound on pip dependabot PRs (#40308)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-21 08:53:57 +07:00 |
|
Evan Rusackas
|
89cab1860e
|
chore(codeowners): add @rusackas as translations maintainer (#40295)
Co-authored-by: Claude <claude@anthropic.com>
|
2026-05-20 11:41:58 -07:00 |
|
dependabot[bot]
|
ffbce27c9b
|
chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 (#40269)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-19 21:51:40 -07:00 |
|
dependabot[bot]
|
f47300102c
|
chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 (#40218)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-18 06:26:20 -07:00 |
|
Evan Rusackas
|
672e9a1477
|
fix(docs): tighten onBrokenLinks to throw and fix surfaced broken links (#40102)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-14 11:07:18 -07:00 |
|
Arpit Jain
|
62dc237014
|
chore(ci): add explicit permissions to additional workflows (#40067)
|
2026-05-14 23:24:46 +07:00 |
|
dependabot[bot]
|
5d40d8aeac
|
chore(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 (#40016)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-13 09:33:14 -07:00 |
|
Evan Rusackas
|
658907a0a6
|
fix(gha): use sound condition gating for latest-tag step (#40035)
Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-12 22:27:26 +07:00 |
|
Evan Rusackas
|
5ab8583cd0
|
chore(gha): pin github/codeql-action to a SHA (#40043)
Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-11 20:18:55 -07:00 |
|
Evan Rusackas
|
e66fbc91c2
|
chore(gha): pass commenter login through env in claude.yml (#40042)
Co-authored-by: Superset Dev <dev@superset.apache.org>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
|
2026-05-11 20:00:27 -07:00 |
|
Evan Rusackas
|
e77f6ece92
|
fix(ci): serialize Docs Deployment runs to avoid push races (#40030)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-05-11 11:25:31 -07:00 |
|
dependabot[bot]
|
d3c44e311e
|
chore(deps): bump aws-actions/amazon-ecr-login from 2.1.4 to 2.1.5 (#39931)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-07 21:54:59 +07:00 |
|
Beto Dealmeida
|
cb53745d43
|
feat: semantic layer extension (#37815)
|
2026-05-05 12:07:46 -04:00 |
|
dependabot[bot]
|
1ac113fd44
|
chore(deps): bump aws-actions/amazon-ecs-render-task-definition from 1.8.4 to 1.8.5 (#39809)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-01 06:31:48 -07:00 |
|
dependabot[bot]
|
de45f3a928
|
chore(deps): bump aws-actions/amazon-ecs-deploy-task-definition from 2.6.1 to 2.6.2 (#39806)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-01 09:30:49 -04:00 |
|
Evan Rusackas
|
e585406fff
|
chore(codeowners): notify @sfirke on translation changes (#39794)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-04-30 23:07:29 -04:00 |
|
Jakub Hrubý
|
512ba43e76
|
feat(i18n): add Czech translations (#36153)
Co-authored-by: Jakub Hrubý <jakub.hruby@orgis.cz>
Co-authored-by: Jezevec <panjzvc@gmail.com>
Co-authored-by: David Kopelent <david.kopelent@saltpay.co>
Co-authored-by: David Kopelent <66686489+davidkopelent@users.noreply.github.com>
|
2026-04-30 11:14:58 -04:00 |
|
EPoikans
|
bc875aa3e3
|
feat: Latvian localization (#38965)
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com>
|
2026-04-30 06:19:42 -07:00 |
|
Joe Li
|
7842a9b05d
|
fix(playwright): remove Google Sheets dependency from dataset tests (#39143)
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
2026-04-30 06:18:50 -07:00 |
|
dependabot[bot]
|
4c4f3341de
|
chore(deps): bump dawidd6/action-download-artifact from 20 to 21 (#39742)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-29 16:01:28 -04:00 |
|
Daniel Vaz Gaspar
|
eba08ae52a
|
fix(ci): switch Dependabot Python ecosystem from uv to pip (#39726)
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
2026-04-29 12:30:38 +01:00 |
|
Đỗ Trọng Hải
|
5fe3a1c2cd
|
fix(dev): revert react-checkbox-tree from 2.1.0 to 1.8.0 in /superset-frontend (#39660)
Signed-off-by: hainenber <dotronghai96@gmail.com>
Co-authored-by: Evan Rusackas <evan@rusackas.com>
|
2026-04-27 14:17:17 -04:00 |
|
dependabot[bot]
|
59bc895f3f
|
chore(deps): bump aws-actions/amazon-ecr-login from 2.1.3 to 2.1.4 (#39583)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-23 03:30:52 -04:00 |
|
dependabot[bot]
|
dc9b459b27
|
chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#39481)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-20 08:34:02 -07:00 |
|
dependabot[bot]
|
a9487cbc84
|
chore(deps): bump aws-actions/amazon-ecr-login from 2.1.2 to 2.1.3 (#39403)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-18 12:51:07 +07:00 |
|
dependabot[bot]
|
ce5b2aa424
|
chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#39320)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-18 12:49:30 +07:00 |
|
Evan Rusackas
|
690a411cf3
|
chore(ci): require PMC review for CI-executed scripts (#39462)
Co-authored-by: Claude Code <noreply@anthropic.com>
|
2026-04-17 12:55:27 -07:00 |
|
dependabot[bot]
|
f4a6ea0fde
|
chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#39267)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-15 14:52:48 -07:00 |
|
dependabot[bot]
|
e542e9f840
|
chore(deps): bump actions/cache from 5.0.4 to 5.0.5 (#39368)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-15 14:52:32 -07:00 |
|
dependabot[bot]
|
5661fc9128
|
chore(deps): bump anthropics/claude-code-action from 1.0.93 to 1.0.96 + temporarily stop Dependabot PR for claude-code-action due to high release frequency but low usage(#39360)
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: hainenber <dotronghai96@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: hainenber <dotronghai96@gmail.com>
|
2026-04-15 22:26:44 +07:00 |
|
dependabot[bot]
|
6287a07912
|
chore(deps): bump anthropics/claude-code-action from 1.0.89 to 1.0.93 (#39318)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-14 23:14:11 +07:00 |
|