rusackas opened a new pull request, #41774: URL: https://github.com/apache/superset/pull/41774
### SUMMARY `superset-frontend` is an npm-workspaces monorepo with a single shared `package-lock.json`. Dependabot opened eight separate PRs (#41559, #41560, #41561, #41562, #41563, #41564, #41568, #41569) each bumping `lodash-es` from `^4.17.21` to `^4.18.1` in one workspace at a time. Every one of them fails CI because bumping the dep in some workspaces while others stay at `^4.17.21` leaves the shared lockfile inconsistent. This PR does it in one clean pass: it bumps every remaining `lodash-es: ^4.17.21` declaration to `^4.18.1` across all 11 workspaces and regenerates the single lockfile so it's internally consistent. It also covers the root `superset-frontend` package, `superset-core`, and `preset-chart-deckgl`, which dependabot didn't open PRs for. `superset-ui-core`, `generator-superset`, and `docs` were already on 4.18.1 and are left untouched. Supersedes and will close: - #41559 - #41560 - #41561 - #41562 - #41563 - #41564 - #41568 - #41569 ### TESTING INSTRUCTIONS Lockfile regenerated with `npm install`; frontend CI validates install/build. ### ADDITIONAL INFORMATION - [ ] Has associated issue: - [ ] Required feature flags: - [ ] Changes UI - [ ] Includes DB Migration (follow approval process in [SIP-59](https://github.com/apache/superset/issues/13351)) - [ ] Migration is atomic, supports rollback & is backwards-compatible - [ ] Confirm DB migration upgrade and downgrade tested - [ ] Runtime estimates and downtime expectations provided - [ ] Introduces new feature or API - [ ] Removes existing feature or API -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
