Skip to content

feat(sec): resolve all vuln alerts in superset-embedded-sdk, superset-frontend and docs#41776

Open
hainenber wants to merge 6 commits into
masterfrom
feat/resolve-all-dependabot-vuln-alerts
Open

feat(sec): resolve all vuln alerts in superset-embedded-sdk, superset-frontend and docs#41776
hainenber wants to merge 6 commits into
masterfrom
feat/resolve-all-dependabot-vuln-alerts

Conversation

@hainenber

Copy link
Copy Markdown
Contributor

feat(sec): resolve all vuln alerts in superset-embedded-sdk, superset-frontend and docs

SUMMARY

Aside from fixing ALL vuln alerts at the time of writing for said directories, there are a few notable changes in this PR as well:

  • Accept webpack.extend.ts in docs into tsconfig.json for type checking and corresponding type fix.
  • Manually load YAML-based INTHEWILD file to remove usage of unmaintained js-yaml-loader.

Regarding 2nd item, I've manually checked and there are no discrepancies between docs built locally and what has been deployed

Locally build docs
image

Deployed docs
image

BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF

N/A

TESTING INSTRUCTIONS

Green CI for acceptance criterion

ADDITIONAL INFORMATION

  • Has associated issue:
  • Required feature flags:
  • Changes UI
  • Includes DB Migration (follow approval process in SIP-59)
    • Migration is atomic, supports rollback & is backwards-compatible
    • Confirm DB migration upgrade and downgrade tested
    • Runtime estimates and downtime expectations provided
  • Introduces new feature or API
  • Removes existing feature or API

hainenber added 5 commits July 4, 2026 15:47
Signed-off-by: hainenber <dotronghai96@gmail.com>
…Webpack loader

Signed-off-by: hainenber <dotronghai96@gmail.com>
…ed Webpack config

Signed-off-by: hainenber <dotronghai96@gmail.com>
Signed-off-by: hainenber <dotronghai96@gmail.com>
@github-actions github-actions Bot added doc Namespace | Anything related to documentation embedded labels Jul 5, 2026
@bito-code-review

bito-code-review Bot commented Jul 5, 2026

Copy link
Copy Markdown
Contributor

Bito Automatic Review Skipped - Large PR

Bito didn't auto-review this change because the pull request exceeded the line limit. No action is needed if you didn't intend for the agent to review it. Otherwise, to manually trigger a review, type /review in a comment and save.

@netlify

netlify Bot commented Jul 5, 2026

Copy link
Copy Markdown

Deploy Preview for superset-docs-preview ready!

Name Link
🔨 Latest commit 7fca7ad
🔍 Latest deploy log https://app.netlify.com/projects/superset-docs-preview/deploys/6a49e1cf4c8f2f0008f44140
😎 Deploy Preview https://deploy-preview-41776--superset-docs-preview.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@codecov

codecov Bot commented Jul 5, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.70%. Comparing base (3303d4e) to head (1ea732e).

Additional details and impacted files
@@           Coverage Diff           @@
##           master   #41776   +/-   ##
=======================================
  Coverage   64.70%   64.70%           
=======================================
  Files        2686     2686           
  Lines      148626   148626           
  Branches    34298    34298           
=======================================
  Hits        96164    96164           
  Misses      50697    50697           
  Partials     1765     1765           
Flag Coverage Δ
javascript 69.56% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies:npm doc Namespace | Anything related to documentation embedded size/XXL

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant