sadpandajoe opened a new pull request, #42720: URL: https://github.com/apache/superset/pull/42720
### SUMMARY Repairs the unowned `fs-extra` failure from [Dependabot run 30792144540](https://github.com/apache/superset/actions/runs/30792144540). PR #42635 updated the generator workspace manifest and root lock entry to `[email protected]`, but left a stale nested `packages/generator-superset/node_modules/[email protected]` lock node. Dependabot's package-manager command therefore exited successfully without changing a file, and the updater raised `Dependabot::NpmAndYarn::FileUpdater::NoChangeError`. This change: - removes only the stale nested lock node, allowing the workspace to deduplicate to `[email protected]`; - validates the complete package-lock dependency tree in frontend CI so stale workspace nodes are detected before the next Dependabot run. PR #42653 addresses the separate deck.gl/luma.gl `EOVERRIDE` failures from the same Dependabot run; this PR intentionally does not duplicate that policy change. ### BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF Not applicable. ### TESTING INSTRUCTIONS From `superset-frontend`: ```bash npm ls fs-extra --all --package-lock-only npm ls --all --package-lock-only --depth=0 --json > /dev/null npm ci --ignore-scripts --dry-run ``` Workflow validation: ```bash pre-commit run check-yaml --files .github/workflows/superset-frontend.yml npx --yes --package=@action-validator/[email protected] --package=@action-validator/[email protected] action-validator .github/workflows/superset-frontend.yml ``` `pre-commit run --all-files` was also executed. Installed backend/repository checks passed; frontend/docs hooks could not run without the workspace dependency installs and restricted registry access, Ruff reported pre-existing all-tree violations, and zizmor crashed in macOS system-configuration before parsing the workflow. Hook-generated unrelated formatting was discarded. ### ADDITIONAL INFORMATION - [ ] Has associated issue: - [ ] Required feature flags: - [ ] Changes UI - [ ] Includes DB Migration (follow approval process in [SIP-59](https://github.com/apache/superset/issues/13351)) - [ ] Migration is atomic, supports rollback & is backwards-compatible - [ ] Confirm DB migration upgrade and downgrade tested - [ ] Runtime estimates and downtime expectations provided - [ ] Introduces new feature or API - [ ] Removes existing feature or API -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
