You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@texera.apache.org by "Yicong-Huang (via GitHub)" <gi...@apache.org> on 2026/07/05 10:30:26 UTC
[PR] ci: enable weekly Dependabot version updates [texera]
Yicong-Huang opened a new pull request, #6165:
URL: https://github.com/apache/texera/pull/6165
### What changes were proposed in this PR?
Add `.github/dependabot.yml` to enable weekly Dependabot **version updates** — the complementary half of #6163 (which feeds security *alerts*): alerts flag vulnerable dependencies, version updates keep dependencies current so alerts rarely fire.
| Ecosystem | Directory | Notes |
| --- | --- | --- |
| `sbt` | `/` (root build, all modules) | New Dependabot ecosystem (beta, 2026-05); first use in the ASF org |
| `npm` | `/frontend`, `/pyright-language-service` | Angular majors ignored — they need a guided `ng update` migration with framework/CLI lines moving together (see #6155) |
| `pip` | `/amber` | `requirements.txt` + `operator-requirements.txt` |
| `github-actions` | `/` | Commit prefix `ci` per repo convention |
Noise control: **weekly** schedule, minor/patch bumps **grouped into a single PR per ecosystem**, majors as individual PRs, ≤5 open PRs per ecosystem. Commit prefixes follow the repo's Conventional Commits style (`chore(deps)` / `ci`) so the PR title check passes. 267 ASF repos already use `dependabot.yml`.
Notes for review:
- Local schema validation passes except the `sbt` enum value — schemastore still lags the 2026-05 beta; GitHub's changelog ([Dependabot version updates now support the sbt ecosystem](https://github.blog/changelog/2026-05-26-dependabot-version-updates-now-support-the-sbt-ecosystem/)) is authoritative for the key. After merge, any config error would surface under Insights → Dependency graph → Dependabot.
- The sbt ecosystem is beta: it may not follow every `build.sbt` pattern (e.g. version `val`s), so missed sbt updates are expected at first, not misconfiguration.
- `.asf.yaml`'s `dependabot_updates` (automatic security-*fix* PRs) is deliberately left `false` to avoid a burst of bot PRs for the existing alert backlog while #6152/#6155 are in flight; it can be flipped separately later.
### Any related issues, documentation, discussions?
Closes #6164. Related: #6162 / #6163 (sbt dependency graph for alerts).
### How was this PR tested?
Config-only change; Dependabot runs server-side after merge, so it cannot be exercised by PR CI. Validated locally:
- `yaml.safe_load` parses the file.
- `check-jsonschema --builtin-schema vendor.dependabot` passes for all entries except the not-yet-in-schema `sbt` ecosystem value (see note above).
### Was this PR authored or co-authored using generative AI tooling?
Generated-by: Claude Code (Claude Fable 5)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ci: enable weekly Dependabot version updates [texera]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #6165:
URL: https://github.com/apache/texera/pull/6165#issuecomment-4885687610
<!-- texera-reviewer-suggestion -->
### Automated Reviewer Suggestions
Based on the `git blame` history of the changed files, we recommend the following reviewers:
- No candidates found from `git blame` history.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ci: enable weekly Dependabot version updates [texera]
Posted by "bobbai00 (via GitHub)" <gi...@apache.org>.
bobbai00 merged PR #6165:
URL: https://github.com/apache/texera/pull/6165
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ci: enable weekly Dependabot version updates [texera]
Posted by "codecov-commenter (via GitHub)" <gi...@apache.org>.
codecov-commenter commented on PR #6165:
URL: https://github.com/apache/texera/pull/6165#issuecomment-4885689089
## [Codecov](https://app.codecov.io/gh/apache/texera/pull/6165?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) Report
:white_check_mark: All modified and coverable lines are covered by tests.
:white_check_mark: Project coverage is 59.94%. Comparing base ([`6fdfe19`](https://app.codecov.io/gh/apache/texera/commit/6fdfe19106d64cfb33fb431ac82390966afc3e52?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)) to head ([`5d5f345`](https://app.codecov.io/gh/apache/texera/commit/5d5f345bf4d3517ae1e7a7e4856f0c985bd59564?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)).
<details><summary>Additional details and impacted files</summary>
```diff
@@ Coverage Diff @@
## main #6165 +/- ##
=========================================
Coverage 59.94% 59.94%
Complexity 3311 3311
=========================================
Files 1131 1131
Lines 43805 43805
Branches 4745 4745
=========================================
Hits 26258 26258
Misses 16125 16125
Partials 1422 1422
```
| [Flag](https://app.codecov.io/gh/apache/texera/pull/6165/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | Coverage Δ | | *Carryforward flag |
|---|---|---|---|
| [access-control-service](https://app.codecov.io/gh/apache/texera/pull/6165/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `70.00% <ø> (ø)` | | Carriedforward from [6fdfe19](https://app.codecov.io/gh/apache/texera/commit/6fdfe19106d64cfb33fb431ac82390966afc3e52?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [agent-service](https://app.codecov.io/gh/apache/texera/pull/6165/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `44.59% <ø> (ø)` | | |
| [amber](https://app.codecov.io/gh/apache/texera/pull/6165/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `65.15% <ø> (ø)` | | Carriedforward from [6fdfe19](https://app.codecov.io/gh/apache/texera/commit/6fdfe19106d64cfb33fb431ac82390966afc3e52?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [computing-unit-managing-service](https://app.codecov.io/gh/apache/texera/pull/6165/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `0.00% <ø> (ø)` | | Carriedforward from [6fdfe19](https://app.codecov.io/gh/apache/texera/commit/6fdfe19106d64cfb33fb431ac82390966afc3e52?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [config-service](https://app.codecov.io/gh/apache/texera/pull/6165/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `52.30% <ø> (ø)` | | Carriedforward from [6fdfe19](https://app.codecov.io/gh/apache/texera/commit/6fdfe19106d64cfb33fb431ac82390966afc3e52?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [file-service](https://app.codecov.io/gh/apache/texera/pull/6165/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `62.81% <ø> (ø)` | | Carriedforward from [6fdfe19](https://app.codecov.io/gh/apache/texera/commit/6fdfe19106d64cfb33fb431ac82390966afc3e52?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [frontend](https://app.codecov.io/gh/apache/texera/pull/6165/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `51.48% <ø> (ø)` | | Carriedforward from [6fdfe19](https://app.codecov.io/gh/apache/texera/commit/6fdfe19106d64cfb33fb431ac82390966afc3e52?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [notebook-migration-service](https://app.codecov.io/gh/apache/texera/pull/6165/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `78.57% <ø> (ø)` | | Carriedforward from [6fdfe19](https://app.codecov.io/gh/apache/texera/commit/6fdfe19106d64cfb33fb431ac82390966afc3e52?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [pyamber](https://app.codecov.io/gh/apache/texera/pull/6165/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `91.18% <ø> (ø)` | | Carriedforward from [6fdfe19](https://app.codecov.io/gh/apache/texera/commit/6fdfe19106d64cfb33fb431ac82390966afc3e52?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
| [workflow-compiling-service](https://app.codecov.io/gh/apache/texera/pull/6165/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `55.14% <ø> (ø)` | | Carriedforward from [6fdfe19](https://app.codecov.io/gh/apache/texera/commit/6fdfe19106d64cfb33fb431ac82390966afc3e52?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) |
*This pull request uses carry forward flags. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) to find out more.
</details>
[:umbrella: View full report in Codecov by Harness](https://app.codecov.io/gh/apache/texera/pull/6165?dropdown=coverage&src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache).
:loudspeaker: Have feedback on the report? [Share it here](https://about.codecov.io/codecov-pr-comment-feedback/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache).
<details><summary> :rocket: New features to boost your workflow: </summary>
- :package: [JS Bundle Analysis](https://docs.codecov.com/docs/javascript-bundle-analysis): Save yourself from yourself by tracking and limiting bundle sizes in JS merges.
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ci: enable weekly Dependabot version updates [texera]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #6165:
URL: https://github.com/apache/texera/pull/6165#issuecomment-4885709399
<!-- texera-benchmarks-comment -->
## ⚠️ Benchmark changes need a look
🟢 5 better · 🔴 5 worse · ⚪ 5 noise (<±5%) · 0 without baseline
> Compared against main `6fdfe19` benchmarked on **this same runner**, so the delta is largely free of cross-runner hardware noise. The "7d avg" column still reflects the gh-pages dashboard. Treat <±5% as noise unless repeated.
[Dashboard](https://apache.github.io/texera/dev/bench/) · [Run](https://github.com/apache/texera/actions/runs/28737881929)
| | config | throughput | MB/s | latency | max Δ latest / 7d |
|---|---|---:|---:|---:|---:|
| 🔴 | bs=10 sw=10 sl=64 | 384 | 0.234 | 22,558/48,737/48,737 us | 🔴 +48.2% / 🔴 +221.8% |
| 🟢 | bs=100 sw=10 sl=64 | 940 | 0.574 | 106,329/128,121/128,121 us | 🟢 -20.9% / 🔴 +18.7% |
| ⚪ | bs=1000 sw=10 sl=64 | 1,092 | 0.667 | 918,770/975,036/975,036 us | ⚪ within ±5% / 🟢 -8.0% |
<details><summary>Baseline details</summary>
Latest main `6fdfe19` from same runner
| config | metric | PR | latest main | 7d avg | Δ latest | Δ 7d |
|---|---|---:|---:|---:|---:|---:|
| bs=10 sw=10 sl=64 | throughput | 384 tuples/sec | 462 tuples/sec | 776.36 tuples/sec | -16.9% | -50.5% |
| bs=10 sw=10 sl=64 | MB/s | 0.234 MB/s | 0.282 MB/s | 0.474 MB/s | -17.0% | -50.6% |
| bs=10 sw=10 sl=64 | p50 | 22,558 us | 19,154 us | 12,636 us | +17.8% | +78.5% |
| bs=10 sw=10 sl=64 | p95 | 48,737 us | 32,886 us | 15,143 us | +48.2% | +221.8% |
| bs=10 sw=10 sl=64 | p99 | 48,737 us | 32,886 us | 18,954 us | +48.2% | +157.1% |
| bs=100 sw=10 sl=64 | throughput | 940 tuples/sec | 884 tuples/sec | 985.33 tuples/sec | +6.3% | -4.6% |
| bs=100 sw=10 sl=64 | MB/s | 0.574 MB/s | 0.539 MB/s | 0.601 MB/s | +6.5% | -4.6% |
| bs=100 sw=10 sl=64 | p50 | 106,329 us | 112,863 us | 101,671 us | -5.8% | +4.6% |
| bs=100 sw=10 sl=64 | p95 | 128,121 us | 161,943 us | 107,939 us | -20.9% | +18.7% |
| bs=100 sw=10 sl=64 | p99 | 128,121 us | 161,943 us | 113,798 us | -20.9% | +12.6% |
| bs=1000 sw=10 sl=64 | throughput | 1,092 tuples/sec | 1,092 tuples/sec | 1,016 tuples/sec | 0.0% | +7.4% |
| bs=1000 sw=10 sl=64 | MB/s | 0.667 MB/s | 0.666 MB/s | 0.62 MB/s | +0.2% | +7.5% |
| bs=1000 sw=10 sl=64 | p50 | 918,770 us | 924,763 us | 989,693 us | -0.6% | -7.2% |
| bs=1000 sw=10 sl=64 | p95 | 975,036 us | 952,495 us | 1,028,327 us | +2.4% | -5.2% |
| bs=1000 sw=10 sl=64 | p99 | 975,036 us | 952,495 us | 1,059,969 us | +2.4% | -8.0% |
</details>
<details><summary>Raw CSV</summary>
```csv
config_idx,batch_size,schema_width,string_len,num_batches,total_ms,total_tuples,total_bytes,tuples_per_sec,mb_per_sec,lat_p50_us,lat_p95_us,lat_p99_us
0,10,10,64,20,520.88,200,128000,384,0.234,22557.92,48736.61,48736.61
1,100,10,64,20,2126.79,2000,1280000,940,0.574,106329.31,128121.43,128121.43
2,1000,10,64,20,18310.43,20000,12800000,1092,0.667,918770.22,975036.46,975036.46
```
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org