Evan Rusackas
2908d630f9
ci(frontend): track bundle size over time with benchmark-action
...
Superset's frontend bundle size is a recurring complaint, but until now
there's been no ongoing visibility into it -- only periodic manual cleanup
efforts. This adds a `bundle-size` job to superset-frontend.yml that builds
the real production bundle (npm run build), reduces its per-entrypoint
sizes to a few headline numbers, and tracks them over time via
benchmark-action/github-action-benchmark, posting a PR comment when a
change regresses past 110% of the last recorded baseline.
Reuses the already-built CI Docker image (same image sharded-jest-tests /
lint-frontend / etc. already download), so the only new cost is the
production webpack build itself -- and that's cheap after the first run:
webpack's persistent filesystem cache (already configured in
webpack.config.js) makes warm rebuilds ~20s locally vs several minutes
cold, confirmed by hand against this repo's real build.
webpack.config.js gains a BUNDLE_SIZE_STATS env-gated stats override
(mirrors the existing BUNDLE_ANALYZER pattern). The default `stats:
'minimal'` omits per-asset sizes entirely; `--stats=normal` includes them
but also serializes the full ~15k-module dependency graph, producing a
560+MB stats.json for this app -- large enough to exceed Node's max
string length on a plain fs.readFileSync. The env-gated override requests
just `{ assets: true, entrypoints: true }`, verified end-to-end against a
minimal synthetic webpack project (same webpack/webpack-cli versions) and
against real stats pulled from this repo's actual production build.
History storage deliberately avoids the gh-pages branch (benchmark-action's
usual default) since that branch is the live Helm chart index published by
superset-helm-release.yml, not free real estate. Instead uses
external-data-json-path with actions/cache: restored on every run (PR or
push) so PRs get a same-baseline comparison and regression comment, but
only saved back to the cache on push to master, so an unmerged PR's numbers
never become the shared baseline. No gh-pages branch is touched in any
code path, and no PAT/GitHub App is needed -- comment-on-alert only needs
the default per-job GITHUB_TOKEN.
2026-07-28 15:17:53 -07:00
Kobi Hikri
22ad3f2c34
fix(ci): make the Dependency Review check able to fail again ( #42537 )
2026-07-28 11:52:12 -07:00
Đỗ Trọng Hải
e426fb7bc6
chore(ci): correct GH event type for opening new issue and PR in supersetbot orglabel job ( #42424 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-07-28 09:16:41 -07:00
Evan Rusackas
7b767f6c1d
chore(ci): swap linkinator-action for lychee-action in docs link checker ( #42501 )
...
Co-authored-by: Superset Dev <dev@superset.apache.org >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-28 21:33:01 +07:00
dependabot[bot]
39f9b7029b
chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 ( #42520 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-28 16:05:23 +03:00
dependabot[bot]
a970838b5c
chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 ( #42522 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-28 03:48:46 -07:00
dependabot[bot]
748e1e80f0
chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0 ( #42452 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-27 12:45:26 -07:00
Đỗ Trọng Hải
03c97764d1
chore(ci): remove nyc usage for merging coverage results as Codecov natively supports the action ( #42431 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-07-27 10:28:26 -07:00
Joe Li
f7d0ec3a2c
chore: add @rusackas to migration code owners ( #42398 )
2026-07-24 13:18:33 -07:00
dependabot[bot]
5b5e5cf82d
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 ( #42376 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 21:23:00 +07:00
dependabot[bot]
cc8edd2231
chore(deps): bump ag-grid from 36.0.0 to 36.0.1 in /superset-frontend ( #42338 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: hainenber <dotronghai96@gmail.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: hainenber <dotronghai96@gmail.com >
2026-07-23 22:21:37 +07:00
dependabot[bot]
873da606dd
chore(deps): bump github/codeql-action/init from 4.37.0 to 4.37.1 ( #42334 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-23 21:36:39 +07:00
dependabot[bot]
1dd3103c24
chore(deps): bump github/codeql-action/analyze from 4.37.0 to 4.37.1 ( #42331 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-23 21:36:16 +07:00
dependabot[bot]
2926d6f6a9
chore(deps): bump actions/labeler from 6.2.0 to 7.0.0 ( #42332 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-23 21:34:54 +07:00
dependabot[bot]
f50b7b7154
chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 ( #42303 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 10:28:11 -07:00
dependabot[bot]
248f6e1064
chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 ( #42302 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 02:21:21 -07:00
Evan Rusackas
f2967264d2
fix(ci): diff pre-commit changed files against the live base branch tip ( #42152 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-21 10:20:57 -07:00
dependabot[bot]
bafe5ad9ba
chore(deps): bump actions/setup-java from 5.5.0 to 5.6.0 ( #42260 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 01:15:32 -07:00
Evan Rusackas
590357731b
feat(ci): cancel CI runs when hold label applied, re-run on removal ( #40387 )
...
Co-authored-by: Claude <claude@anthropic.com >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com >
2026-07-20 10:35:26 -07:00
Đỗ Trọng Hải
1f81b700c1
chore(ci): upgrade GHA runner image to Ubuntu 26.04 ( #42191 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: David <39565245+dmunozv04@users.noreply.github.com >
Co-authored-by: Hans Yu <hans.yu@outlook.de >
Co-authored-by: Shaitan <105581038+sha174n@users.noreply.github.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: Rehan Islam <2025eb01502@online.bits-pilani.ac.in >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: J0s3-H3nr1qu3 <hareboom@gmail.com >
Co-authored-by: José Teixeira <jose.teixeira@douroeci.com >
2026-07-20 09:43:19 -07:00
Evan Rusackas
5a17ae1224
chore: drop Python 3.10 support, require Python 3.11+ ( #42045 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com >
Co-authored-by: hainenber <dotronghai96@gmail.com >
2026-07-20 08:16:22 -07:00
dependabot[bot]
eed41b6435
chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 ( #42229 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-20 21:33:36 +07:00
David
9e9b7c4bbd
feat(ci): run helm-unittest on pull requests ( #42206 )
2026-07-20 07:36:19 +07:00
dependabot[bot]
dab5f30842
chore(deps): bump @docusaurus/faster from 3.10.1 to 3.10.2 in /docs ( #42179 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: hainenber <dotronghai96@gmail.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com >
Co-authored-by: hainenber <dotronghai96@gmail.com >
2026-07-18 15:55:18 +07:00
dependabot[bot]
8299e7f87c
chore(deps-dev): bump storybook from 10.4.6 to 10.5.0 in /superset-frontend ( #42185 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: hainenber <dotronghai96@gmail.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: hainenber <dotronghai96@gmail.com >
2026-07-18 15:41:22 +07:00
Đỗ Trọng Hải
45354994a6
build(deps): update @rjsf deps to v6 ( #41955 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-07-18 10:54:40 +07:00
Evan Rusackas
68297886d4
fix(ci): stop concurrency cancellation from bricking required checks on approval-gated PRs ( #42148 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-17 16:38:27 -07:00
Evan Rusackas
c540f782a3
fix(ci): remove Python 3.10 from the test matrix to unblock CI ( #42058 )
...
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com >
2026-07-15 15:48:47 -07:00
dependabot[bot]
d80267d00b
chore(deps): bump github/codeql-action/init from 4.36.3 to 4.37.0 ( #42068 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 21:21:25 -07:00
dependabot[bot]
ad8f2cf268
chore(deps): bump github/codeql-action/analyze from 4.36.3 to 4.37.0 ( #42069 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 20:38:21 -07:00
Joe Li
13121fcd58
fix(ci): skip unsupported React 19 Dependabot updates ( #42047 )
2026-07-15 08:03:14 +07:00
Evan Rusackas
be768efc0f
fix(ci): make pre-commit fail closed instead of silently passing on an empty file list ( #42044 )
...
Co-authored-by: Amin Ghadersohi <amin.ghadersohi@gmail.com >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-14 16:20:56 -07:00
Evan Rusackas
4e10a96253
chore(ci): correct actions/setup-node version comment to v6.4.0 ( #42038 )
...
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com >
2026-07-14 21:31:08 +07:00
Evan Rusackas
24959d1656
fix(ci): correct setup-node version comment in tech-debt.yml ( #42037 )
2026-07-14 21:30:47 +07:00
Evan Rusackas
d5e75c4813
fix(ci): correct setup-node version comment in tag-release.yml ( #42039 )
2026-07-14 19:43:13 +07:00
dependabot[bot]
e86dcf7b82
chore(deps): bump actions/setup-java from 5.4.0 to 5.5.0 ( #42028 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 05:14:08 -07:00
dependabot[bot]
9180ace1dd
chore(deps): bump actions/labeler from 6.1.0 to 6.2.0 ( #41988 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 03:26:15 -07:00
Evan Rusackas
a1d1d69f5e
ci: enforce SQLAlchemy 2.0 deprecation warnings in unit-test CI ( #41915 )
...
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com >
2026-07-12 08:43:09 -07:00
dependabot[bot]
2a3d65f61a
chore(deps): bump docker/login-action from 4.3.0 to 4.4.0 ( #41927 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-10 02:16:35 -07:00
dependabot[bot]
c1d4401d29
chore(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3 ( #41899 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 10:17:45 -07:00
dependabot[bot]
a4418a27c5
chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3 ( #41900 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 09:34:41 -07:00
dependabot[bot]
30e1ab3203
chore(deps): bump docker/login-action from 4.2.0 to 4.3.0 ( #41901 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 09:34:37 -07:00
Đỗ Trọng Hải
2c8cdbbd9b
chore(dependabot): unify npm Dependabot config used for multi-workspace superset-frontend ( #41586 )
2026-07-09 01:15:15 +07:00
Đỗ Trọng Hải
ad8e6d4140
build(deps): upgrade react-markdown to v9 and remark-gfm to v4 ( #41778 )
...
Signed-off-by: hainenber <dotronghai96@gmail.com >
2026-07-06 11:50:09 -07:00
Evan Rusackas
f9bcf189c9
chore(ci): suppress zizmor adhoc-packages on GHA validator install ( #41694 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-02 14:55:49 -07:00
Evan Rusackas
1c74185a71
chore(ci): correct codeql-action version comment to match pinned SHA ( #41695 )
...
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-02 14:55:40 -07:00
Joe Li
c1bd45f561
fix(ci): allow showtime to check out fork PR code under checkout v7 ( #41643 )
2026-07-03 00:31:43 +07:00
Evan Rusackas
6c57919647
chore(codeowners): update maintainer assignments ( #41634 )
...
Co-authored-by: Claude Code <noreply@anthropic.com >
2026-07-01 12:25:13 -07:00
Đỗ Trọng Hải
7d7c3ce723
feat(ci): install helm-docs directly instead of using whole brew setup ( #41629 )
2026-07-02 00:35:43 +07:00
Evan Rusackas
42a5f64256
chore(ci): silence zizmor adhoc-packages note for supersetbot install ( #41546 )
2026-07-01 00:43:32 +07:00