From 35abde309b6ed216aed84e0ad139448a748c138c Mon Sep 17 00:00:00 2001 From: Xinyuan Lin Date: Tue, 20 Oct 2026 20:23:36 -0700 Subject: [PATCH 1/3] fix(deps, ci): bump sbt/setup-sbt to v1.5.12 to restore CI The ASF actions allowlist dropped the transitive carabiner-dev refs (install/ampel, download-and-verify, ampel-bootstrap) that setup-sbt v1.5.7 resolves through, so every job using it fails at "Set up job". v1.5.12 resolves through refs that are all on the current allowlist; its inputs are unchanged. Bump all 9 call sites. --- .github/workflows/benchmarks.yml | 2 +- .github/workflows/build-and-push-images.yml | 6 +++--- .github/workflows/build.yml | 8 ++++---- .github/workflows/dependency-graph.yml | 2 +- 4 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml index a427a18646b..a34f34dc98f 100644 --- a/.github/workflows/benchmarks.yml +++ b/.github/workflows/benchmarks.yml @@ -241,7 +241,7 @@ jobs: - name: Generate Python proto bindings run: bash bin/python-proto-gen.sh - name: Setup sbt launcher - uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 + uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' diff --git a/.github/workflows/build-and-push-images.yml b/.github/workflows/build-and-push-images.yml index 7fd76bed7c1..1f69cb36070 100644 --- a/.github/workflows/build-and-push-images.yml +++ b/.github/workflows/build-and-push-images.yml @@ -126,7 +126,7 @@ jobs: java-version: 17 - name: Setup sbt launcher - uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 + uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: @@ -337,7 +337,7 @@ jobs: java-version: 17 - name: Setup sbt launcher - uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 + uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: @@ -417,7 +417,7 @@ jobs: java-version: 17 - name: Setup sbt launcher - uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 + uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index c3cfd13be3f..9b0a9e02c3b 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -246,7 +246,7 @@ jobs: env: PGPASSWORD: postgres - name: Setup sbt launcher - uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 + uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' @@ -500,7 +500,7 @@ jobs: env: PGPASSWORD: postgres - name: Setup sbt launcher - uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 + uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' @@ -820,7 +820,7 @@ jobs: distribution: "temurin" java-version: 17 - name: Setup sbt launcher - uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 + uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' @@ -975,7 +975,7 @@ jobs: distribution: "temurin" java-version: 17 - name: Setup sbt launcher - uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 + uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 with: extraSbtFiles: '["*.sbt", "project/**.{scala,sbt}", "project/build.properties" ]' diff --git a/.github/workflows/dependency-graph.yml b/.github/workflows/dependency-graph.yml index 4034b15715f..4a2ddf05d17 100644 --- a/.github/workflows/dependency-graph.yml +++ b/.github/workflows/dependency-graph.yml @@ -48,7 +48,7 @@ jobs: java-version: 17 - name: Setup sbt launcher - uses: sbt/setup-sbt@8feba82adc7f01ddcf8165b86f778bdb5b82cebc # v1.5.7 + uses: sbt/setup-sbt@ecad189dd245444b9ae0a0cd5922fd938b88906f # v1.5.12 - uses: coursier/cache-action@95e5b1029b6b86e7bac033ee44a0697d8a527d2d # v8.1.1 From 40b4ff532df155bb7c4cccff849a7c58739b3b97 Mon Sep 17 00:00:00 2001 From: Ian Maxon Date: Thu, 22 Oct 2026 12:15:18 -0700 Subject: [PATCH 2/3] fix(ci): raise merge queue timeout If this limit is too low, the merge queue can enter a starvation loop where every job times out if runners are simply busy. Raising the limit stops this. --- .asf.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.asf.yaml b/.asf.yaml index 42316db44a0..a0d403bbda1 100644 --- a/.asf.yaml +++ b/.asf.yaml @@ -94,7 +94,7 @@ github: max_entries_to_merge: 5 min_entries_to_merge_wait_minutes: 3 grouping_strategy: HEADGREEN - check_response_timeout_minutes: 45 + check_response_timeout_minutes: 360 - type: pull_request parameters: allowed_merge_methods: From f8cfedab02041f77dae24fd0b82ddf798dc18313 Mon Sep 17 00:00:00 2001 From: Xinyuan Lin Date: Thu, 22 Oct 2026 00:55:59 -0700 Subject: [PATCH 3/3] fix(deps, ci): bump playwright to 1.64.1 for Ubuntu 26.04 ubuntu-latest runners are moving to the Ubuntu 26.04 image, where playwright 1.59.1 refuses to install Chromium ("Playwright does not support chromium on ubuntu26.04-x64"), so the ubuntu frontend leg fails before any test runs. 1.61.0 is the first release that knows ubuntu26.04; bump to the current 1.64.1 and regenerate yarn.lock. --- frontend/package.json | 2 +- frontend/yarn.lock | 43 ++++++++++--------------------------------- 2 files changed, 11 insertions(+), 34 deletions(-) diff --git a/frontend/package.json b/frontend/package.json index a8c9b3dd6a6..a3d30139cd4 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -127,7 +127,7 @@ "jsdom": "25.0.1", "nodecat": "2.0.0", "nx": "23.0.2", - "playwright": "1.59.1", + "playwright": "1.64.1", "prettier": "3.2.5", "prettier-eslint-cli": "8.0.1", "rxjs-marbles": "7.0.1", diff --git a/frontend/yarn.lock b/frontend/yarn.lock index f7a1ed183f5..a5d8706683f 100644 --- a/frontend/yarn.lock +++ b/frontend/yarn.lock @@ -10425,16 +10425,6 @@ __metadata: languageName: node linkType: hard -"fsevents@npm:2.3.2": - version: 2.3.2 - resolution: "fsevents@npm:2.3.2" - dependencies: - node-gyp: "npm:latest" - checksum: 10c0/be78a3efa3e181cda3cf7a4637cb527bcebb0bd0ea0440105a3bb45b86f9245b307dc10a2507e8f4498a7d4ec349d1910f4d73e4d4495b16103106e07eee735b - conditions: os=darwin - languageName: node - linkType: hard - "fsevents@npm:~2.3.2, fsevents@npm:~2.3.3": version: 2.3.3 resolution: "fsevents@npm:2.3.3" @@ -10445,15 +10435,6 @@ __metadata: languageName: node linkType: hard -"fsevents@patch:fsevents@npm%3A2.3.2#optional!builtin": - version: 2.3.2 - resolution: "fsevents@patch:fsevents@npm%3A2.3.2#optional!builtin::version=2.3.2&hash=df0bf1" - dependencies: - node-gyp: "npm:latest" - conditions: os=darwin - languageName: node - linkType: hard - "fsevents@patch:fsevents@npm%3A~2.3.2#optional!builtin, fsevents@patch:fsevents@npm%3A~2.3.3#optional!builtin": version: 2.3.3 resolution: "fsevents@patch:fsevents@npm%3A2.3.3#optional!builtin::version=2.3.3&hash=df0bf1" @@ -10787,7 +10768,7 @@ __metadata: nx: "npm:23.0.2" papaparse: "npm:5.4.1" path-browserify: "npm:1.0.1" - playwright: "npm:1.59.1" + playwright: "npm:1.64.1" plotly.js-basic-dist-min: "npm:2.29.0" prettier: "npm:3.2.5" prettier-eslint-cli: "npm:8.0.1" @@ -14177,27 +14158,23 @@ __metadata: languageName: node linkType: hard -"playwright-core@npm:1.59.1": - version: 1.59.1 - resolution: "playwright-core@npm:1.59.1" +"playwright-core@npm:1.64.1": + version: 1.64.1 + resolution: "playwright-core@npm:1.64.1" bin: playwright-core: cli.js - checksum: 10c0/d41a74d9681ce3beb3d5239e9ed577710b4ad099a6ca2476219c6599d51e9cb4b80bd72ed82c528da6a5d929c18ae3b872cf02bb83f78fa1c2cb9199c501abee + checksum: 10c0/91c4f5ed1cff4b0e18b6ac62f66770f5f1b6c204d4aebd6a321c07466dca18a70822ac692597c6059705a703f9768097ac551df179fb49294d639509148e04f3 languageName: node linkType: hard -"playwright@npm:1.59.1": - version: 1.59.1 - resolution: "playwright@npm:1.59.1" +"playwright@npm:1.64.1": + version: 1.64.1 + resolution: "playwright@npm:1.64.1" dependencies: - fsevents: "npm:2.3.2" - playwright-core: "npm:1.59.1" - dependenciesMeta: - fsevents: - optional: true + playwright-core: "npm:1.64.1" bin: playwright: cli.js - checksum: 10c0/dfe38396e616e5c4f98825ce90037bb96e477c5a2bd9258a24854f8ce72a8a41427b19098863866f85aa0216e70287dd537c4438d761aca93995e31ae099c533 + checksum: 10c0/edf52d0a79feca37bf383e841a467aa68750684128218eac560063991c9e4b615a94901f580cd8a088bb05fd53008ab4a0e5e8d976067698b60ae5d1de2459f3 languageName: node linkType: hard