Evan Rusackas
abb698f683
ci: add Kesin11/actions-timeline to the heavy CI workflows
...
Adds a per-job/step Gantt chart (rendered as a mermaid diagram in the run
summary) to the 15 substantive CI workflows -- the 13 setup-backend
consumers plus superset-frontend.yml and docker.yml, the other two
heaviest CI paths. Skips trivial bot/label/notification workflows that run
in seconds and have nothing worth visualizing.
For single-job (or single-heavy-job-in-a-linear-chain) workflows, the step
is registered first, before checkout, so its post-processing hook -- which
is what actually renders the timeline -- captures the full job including
other steps' own cleanup. For workflows with multiple independent parallel
jobs, added a dedicated `actions-timeline` terminal job (`needs: [...]`,
`if: always()`) instead of duplicating the step into each parallel job:
the action fetches every job of the whole run from the GitHub API
regardless of which job it executes in, so one copy that runs after
every sibling job completes produces one authoritative timeline, while N
copies dropped into N parallel jobs would each race to render an
incomplete gantt before their siblings finish.
`expand-composite-actions: true` is set everywhere so setup-backend's
internal steps (Python setup, uv install, apt package caching, dependency
install) show up as their own bars rather than one opaque blob -- directly
useful given the last two PRs' worth of composite-action changes.
`actions: read` is added wherever needed to read job/step timing from the
Actions API, either to the workflow's top-level `permissions:` (when the
job in question has no job-level override) or directly into the relevant
job's own `permissions:` block (when one already exists, since a
job-level block replaces rather than merges with the workflow-level one).
2026-07-27 22:19:59 -07:00
dependabot[bot]
5b5e5cf82d
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 ( #42376 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 21:23:00 +07:00
Đỗ Trọng Hải
1f81b700c1
chore(ci): upgrade GHA runner image to Ubuntu 26.04 ( #42191 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: David <39565245+dmunozv04@users.noreply.github.com >
Co-authored-by: Hans Yu <hans.yu@outlook.de >
Co-authored-by: Shaitan <105581038+sha174n@users.noreply.github.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: Rehan Islam <2025eb01502@online.bits-pilani.ac.in >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: J0s3-H3nr1qu3 <hareboom@gmail.com >
Co-authored-by: José Teixeira <jose.teixeira@douroeci.com >
2026-07-20 09:43:19 -07:00
Evan Rusackas
c540f782a3
fix(ci): remove Python 3.10 from the test matrix to unblock CI ( #42058 )
...
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com >
2026-07-15 15:48:47 -07:00
dependabot[bot]
420a74b01e
chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 ( #41358 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 00:52:16 -07:00
Evan Rusackas
9da54eff84
chore(ci): set least-privilege workflow permissions (zizmor) ( #41161 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-17 15:41:47 -07:00
dependabot[bot]
66733a5d72
chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 ( #41039 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-15 10:19:52 -07:00
dependabot[bot]
7a3b8f49c7
chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 ( #40892 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: hainenber <dotronghai96@gmail.com >
2026-06-10 00:25:41 +07:00
Evan Rusackas
c58408d76c
fix(revert 40875): "ci: authenticate Docker Hub pulls for service containers" failed ( #40879 )
2026-06-09 11:17:59 +07:00
Evan Rusackas
fb0e7fecaf
ci: authenticate Docker Hub pulls for service containers ( #40875 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-09 08:57:31 +07:00
Evan Rusackas
80a3df3550
ci: run full Python-version matrix on push, current-only on PRs ( #40722 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-04 21:17:29 +02:00
Evan Rusackas
8dcc7e7eec
ci: stable required-check anchors for skippable matrix test jobs ( #40772 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-04 09:50:06 -07:00
Evan Rusackas
ff5e43c8a0
ci: add timeout-minutes to compute-heavy workflow jobs ( #40743 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-04 09:47:55 -07:00
Shaitan
43fde2fb07
fix(charts): enforce DISALLOWED_SQL_FUNCTIONS and DISALLOWED_SQL_TABLES at chart-data execution ( #40567 )
...
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
2026-06-03 21:52:48 +01:00
Evan Rusackas
e5c7200551
ci: gate expensive test workflows at the job level ( #40718 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-06-03 10:04:10 -07:00
Evan Rusackas
c914df5a67
ci: harden CI against Docker Hub registry flakes (retries + auth) ( #40700 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-03 19:53:24 +07:00
Evan Rusackas
2e7bec3646
chore(ci): harden GitHub Actions workflows per static analysis ( #40545 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-05-30 13:13:43 +07:00
dependabot[bot]
ffbce27c9b
chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 ( #40269 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-19 21:51:40 -07:00
dependabot[bot]
ce5b2aa424
chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #39320 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-18 12:49:30 +07:00
Đỗ Trọng Hải
dbc25dc555
fix(ci): resolve failed CodeCov upload for backend tests ( #38885 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-03-27 18:33:02 -04:00
dependabot[bot]
20d0cfd156
chore(deps): bump codecov/codecov-action from 5.5.3 to 6.0.0 ( #38903 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-27 14:44:26 +07:00
Đỗ Trọng Hải
83823911b5
feat(sec): harden GHA ref by using its SHA ID to prevent accidental usage of compromised actions ( #38782 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-03-21 21:27:30 +07:00
dependabot[bot]
848cce7b2e
chore(deps): bump actions/upload-artifact from 6 to 7 ( #38290 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-27 15:37:08 -08:00
RealGreenDragon
de079a7b19
feat(deps)!: bump postgresql from 16 to 17 ( #37782 )
2026-02-18 17:12:48 -08:00
dependabot[bot]
5e3acc2041
chore(deps): bump actions/upload-artifact from 4 to 6 ( #37320 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-23 10:53:15 -08:00
Evan Rusackas
b460ca94c6
feat(docs): auto-generate database documentation from lib.py ( #36805 )
...
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
2026-01-21 10:54:01 -08:00
dependabot[bot]
23b61b080e
chore(deps): bump actions/checkout from 5 to 6 ( #36219 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-04 12:02:43 -08:00
dependabot[bot]
3dbe593a4a
chore(deps): bump actions/checkout from 4 to 5 ( #34969 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-03 10:36:16 -07:00
Pat Buxton
2d26af25c1
feat: Python 3.12 support ( #33434 )
2025-06-02 10:00:37 -07:00
RealGreenDragon
85d51f5c9a
chore: bump postgresql from 15 to 16 ( #32597 )
2025-03-11 15:26:26 -07:00
Maxime Beauchemin
274aa143d3
chore: python version to 3.11 (while supporting 3.10) ( #31503 )
2025-01-13 18:22:49 -08:00
Maxime Beauchemin
531f1b6aa4
chore(gha): bump ubuntu to latest fresh release ( #31390 )
2024-12-18 23:32:10 -08:00
dependabot[bot]
fe80fb1090
chore(deps): bump codecov/codecov-action from 4 to 5 ( #31214 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-02 17:50:12 -08:00
Maxime Beauchemin
446a3b22dc
chore: move all GHAs to ubuntu-22.04 ( #29447 )
2024-07-01 14:19:25 -06:00
John Bodley
5948dac889
chore(ci): Start Celery worker as a background process ( #29371 )
2024-06-26 12:10:05 -07:00
Maxime Beauchemin
514eda82fb
fix: don't strip SQL comments in Explore - 2nd try ( #28753 )
2024-06-20 14:30:03 -07:00
Maxime Beauchemin
d49d79121c
chore: trigger CI jobs on all release-related branches ( #29274 )
2024-06-17 13:42:58 -07:00
Maxime Beauchemin
e91669821e
fix: run some CI tests against previous python version ( #28419 )
2024-05-10 12:04:29 -07:00
Maxime Beauchemin
51da5adbc7
chore: allow codecov to detect SHA ( #28278 )
2024-04-30 15:32:33 -07:00
Maxime Beauchemin
de9daf7ad9
chore: stabilize MySQL tests by aligning isolation levels ( #28028 )
2024-04-15 15:49:09 -07:00
Maxime Beauchemin
dea430649d
chore: [proposal] de-matrix python-version in GHAs ( #27906 )
2024-04-10 14:32:30 -07:00
Maxime Beauchemin
e80d194b8f
fix: improve change detection for GHAs ( #27904 )
2024-04-08 16:20:25 -07:00
EugeneTorap
3a34c7ff7c
chore: Bump to Python3.10 ( #24112 )
...
Co-authored-by: Maxime Beauchemin <maximebeauchemin@gmail.com >
2024-04-02 09:47:58 -07:00
Maxime Beauchemin
56a6660c16
chore: 2nd try - simplify python dependencies ( #27505 )
2024-03-18 18:39:41 -07:00
Michael S. Molina
a54a24e3b5
fix: Re-enable CI checks on release branches ( #27390 )
2024-03-06 14:23:07 -03:00
dependabot[bot]
5930bbb5d3
build(deps): bump actions/checkout from 2 to 4 ( #26971 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-01 11:56:33 -07:00
dependabot[bot]
a8a9472c39
build(deps): bump actions/setup-python from 4 to 5 ( #26970 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-01 11:20:24 -07:00
Maxime Beauchemin
4b77129cc9
fix(docker): improve docker tags to be cleared and avoid conflicts ( #26787 )
2024-01-30 23:03:25 -08:00
Maxime Beauchemin
c6772b6c78
chore: prevent CI double runs on push + pull_request ( #26766 )
2024-01-23 20:30:53 -08:00
John Bodley
77bd7cf1c6
chore: Reenable SQLite tests which leverage foreign key constraints et al. ( #24605 )
2024-01-09 06:33:47 +13:00