mirror of
https://github.com/apache/superset.git
synced 2026-07-28 17:42:40 +00:00
e4cc16a9d7
Adds a per-job/step Gantt chart (rendered as a mermaid diagram in the run summary) to the 15 substantive CI workflows -- the 13 setup-backend consumers plus superset-frontend.yml and docker.yml, the other two heaviest CI paths. Skips trivial bot/label/notification workflows that run in seconds and have nothing worth visualizing. For single-job (or single-heavy-job-in-a-linear-chain) workflows, the step is registered first, before checkout, so its post-processing hook -- which is what actually renders the timeline -- captures the full job including other steps' own cleanup. For workflows with multiple independent parallel jobs, added a dedicated `actions-timeline` terminal job (`needs: [...]`, `if: always()`) instead of duplicating the step into each parallel job: the action fetches every job of the whole run from the GitHub API regardless of which job it executes in, so one copy that runs after every sibling job completes produces one authoritative timeline, while N copies dropped into N parallel jobs would each race to render an incomplete gantt before their siblings finish. `expand-composite-actions: true` is set everywhere so setup-backend's internal steps (Python setup, uv install, apt package caching, dependency install) show up as their own bars rather than one opaque blob -- directly useful given the last two PRs' worth of composite-action changes. `actions: read` is added wherever needed to read job/step timing from the Actions API, either to the workflow's top-level `permissions:` (when the job in question has no job-level override) or directly into the relevant job's own `permissions:` block (when one already exists, since a job-level block replaces rather than merges with the workflow-level one).
82 lines
2.7 KiB
YAML
82 lines
2.7 KiB
YAML
name: Check python dependencies
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- "master"
|
|
- "[0-9].[0-9]*"
|
|
pull_request:
|
|
types: [synchronize, opened, reopened, ready_for_review]
|
|
|
|
permissions:
|
|
contents: read
|
|
pull-requests: read
|
|
actions: read
|
|
|
|
# cancel previous workflow jobs for PRs
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
check-python-deps:
|
|
runs-on: ubuntu-26.04
|
|
steps:
|
|
- uses: Kesin11/actions-timeline@7bf79990b7c09f5dfb570ac30b814ca597bd538e # v3.1.1
|
|
with:
|
|
expand-composite-actions: true
|
|
|
|
- name: "Checkout ${{ github.ref }} ( ${{ github.sha }} )"
|
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
persist-credentials: false
|
|
submodules: recursive
|
|
fetch-depth: 1
|
|
|
|
- name: Check for file changes
|
|
id: check
|
|
uses: ./.github/actions/change-detector/
|
|
with:
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Setup Python
|
|
if: steps.check.outputs.python
|
|
uses: ./.github/actions/setup-backend/
|
|
|
|
# Authenticate the Docker daemon so the python:slim pull in
|
|
# uv-pip-compile.sh uses our (much higher) authenticated rate limit
|
|
# instead of the shared-runner anonymous one. Best-effort: on fork PRs the
|
|
# secrets are unavailable, so this no-ops and the pull falls back to
|
|
# anonymous (covered by the retry loop in the script).
|
|
- name: Login to Docker Hub
|
|
if: steps.check.outputs.python
|
|
continue-on-error: true
|
|
uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
|
|
with:
|
|
username: ${{ secrets.DOCKERHUB_USER }}
|
|
password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
|
|
- name: Run uv
|
|
if: steps.check.outputs.python
|
|
run: ./scripts/uv-pip-compile.sh
|
|
|
|
- name: Check for uncommitted changes
|
|
if: steps.check.outputs.python
|
|
run: |
|
|
echo "Full diff (for logging/debugging):"
|
|
git diff
|
|
|
|
echo "Filtered diff (excluding comments and whitespace):"
|
|
filtered_diff=$(git diff -U0 | grep '^[-+]' | grep -vE '^[-+]{3}' | grep -vE '^[-+][[:space:]]*#' | grep -vE '^[-+][[:space:]]*$' || true)
|
|
echo "$filtered_diff"
|
|
|
|
if [[ -n "$filtered_diff" ]]; then
|
|
echo
|
|
echo "ERROR: The pinned dependencies are not up-to-date."
|
|
echo "Please run './scripts/uv-pip-compile.sh' and commit the changes."
|
|
echo "More info: https://github.com/apache/superset/tree/master/requirements"
|
|
exit 1
|
|
else
|
|
echo "Pinned dependencies are up-to-date."
|
|
fi
|