Merge remote-tracking branch 'origin/master' into HEAD

.github/workflows/scheduled-docker-image-refresh.yml

@@ -108,18 +108,8 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      # Keep workflow tooling on the triggering revision. Release tags can
-      # contain action pins that no longer satisfy the repository allowlist.
-      - name: Checkout workflow actions
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          ref: ${{ github.sha }}
-          path: workflow-source
-          persist-credentials: false
-          sparse-checkout: .github/actions
-
       - name: Setup Docker Environment
-        uses: ./workflow-source/.github/actions/setup-docker
+        uses: ./.github/actions/setup-docker
         with:
           dockerhub-user: ${{ secrets.DOCKERHUB_USER }}
           dockerhub-token: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -132,7 +122,7 @@ jobs:
           node-version: 20
 
       - name: Setup supersetbot
-        uses: ./workflow-source/.github/actions/setup-supersetbot/
+        uses: ./.github/actions/setup-supersetbot/
 
       - name: Rebuild and push
         env:
@@ -181,7 +171,7 @@ jobs:
             --repo "$REPOSITORY" \
             --title "Scheduled Docker image refresh failed for ${LATEST_RELEASE}" \
             --label "infra:container" \
-            --label "#bug" \
+            --label "bug" \
             --body "The weekly Docker base-image refresh failed for release \`${LATEST_RELEASE}\`. Published images may be missing upstream base-layer security patches until this is resolved.
 
           Failed run: ${RUN_URL}"

AGENTS.md

@@ -297,7 +297,7 @@ pre-commit run eslint            # Frontend linting
 ## Platform-Specific Instructions
 
 - **[CLAUDE.md](CLAUDE.md)** - For Claude/Anthropic tools
-- **[.github/copilot-instructions.md](.github/copilot-instructions.md)** - For GitHub Copilot  
+- **[.github/copilot-instructions.md](.github/copilot-instructions.md)** - For GitHub Copilot
 - **[GEMINI.md](GEMINI.md)** - For Google Gemini tools
 - **[GPT.md](GPT.md)** - For OpenAI/ChatGPT tools
 - **[.cursor/rules/dev-standard.mdc](.cursor/rules/dev-standard.mdc)** - For Cursor editor

scripts/change_detector.py

@@ -39,7 +39,6 @@ RETRYABLE_STATUS_CODES: frozenset[int] = frozenset({403, 429})
 PATTERNS = {
     "python": [
         r"^\.github/workflows/.*python",
-        r"^\.github/workflows/scheduled-docker-image-refresh\.yml$",
         r"^tests/",
         r"^superset/",
         r"^scripts/",

superset-frontend/CHANGELOG.md

@@ -14,7 +14,7 @@
   "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
   KIND, either express or implied.  See the License for the
   specific language governing permissions and limitations
-  under the License.
+  under the License
 -->
 
 # Change Log

tests/unit_tests/scheduled_docker_image_refresh_test.py

@@ -1,65 +0,0 @@
-# Licensed to the Apache Software Foundation (ASF) under one
-# or more contributor license agreements.  See the NOTICE file
-# distributed with this work for additional information
-# regarding copyright ownership.  The ASF licenses this file
-# to you under the Apache License, Version 2.0 (the
-# "License"); you may not use this file except in compliance
-# with the License.  You may obtain a copy of the License at
-#
-#   http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing,
-# software distributed under the License is distributed on an
-# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-# KIND, either express or implied.  See the License for the
-# specific language governing permissions and limitations
-# under the License.
-
-from pathlib import Path
-from typing import Any
-
-import yaml
-
-from scripts import change_detector
-
-WORKFLOW_PATH = (
-    Path(__file__).resolve().parents[2]
-    / ".github/workflows/scheduled-docker-image-refresh.yml"
-)
-
-
-def load_workflow() -> dict[str, Any]:
-    return yaml.safe_load(WORKFLOW_PATH.read_text())
-
-
-def test_scheduled_refresh_uses_current_workflow_actions() -> None:
-    workflow = load_workflow()
-    steps = {step["name"]: step for step in workflow["jobs"]["docker-rebuild"]["steps"]}
-
-    action_checkout = steps["Checkout workflow actions"]
-    assert action_checkout["with"]["ref"] == "${{ github.sha }}"
-    assert action_checkout["with"]["path"] == "workflow-source"
-    assert (
-        steps["Setup Docker Environment"]["uses"]
-        == "./workflow-source/.github/actions/setup-docker"
-    )
-    assert (
-        steps["Setup supersetbot"]["uses"]
-        == "./workflow-source/.github/actions/setup-supersetbot/"
-    )
-
-
-def test_scheduled_refresh_notifier_uses_existing_labels() -> None:
-    workflow = load_workflow()
-    notify_step = workflow["jobs"]["notify-on-failure"]["steps"][0]
-
-    assert '--label "infra:container"' in notify_step["run"]
-    assert '--label "#bug"' in notify_step["run"]
-    assert '--label "bug"' not in notify_step["run"]
-
-
-def test_scheduled_refresh_changes_trigger_python_tests() -> None:
-    assert change_detector.detect_changes(
-        [".github/workflows/scheduled-docker-image-refresh.yml"],
-        change_detector.PATTERNS["python"],
-    )