From d371cf5f773d48a9db005aff06bb51b22ce91147 Mon Sep 17 00:00:00 2001 From: Joe Li Date: Fri, 31 Jul 2026 10:53:43 -0700 Subject: [PATCH 1/2] chore(deps): require manual deck.gl upgrades --- .github/dependabot.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5ac89490d529..73910a2745a3 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -28,6 +28,11 @@ updates: # See https://github.com/apache/superset/pull/37384#issuecomment-3793991389 # TODO: remove the plugin once Lodash usage has been migrated to a more readily tree-shakeable alternative - dependency-name: "@swc/plugin-transform-imports" + # deck.gl and luma.gl share strict peer constraints across the root and + # plugin workspaces, and root overrides pin their transitive versions. + # Upgrade both families together in a manually validated change. + - dependency-name: "@deck.gl/*" + - dependency-name: "@luma.gl/*" # `just-handlerbars-helpers` library in plugin-chart-handlebars requires `currencyformatter`` to be < 2 - dependency-name: "currencyformatter.js" update-types: ["version-update:semver-major"] From 217b5b3d8ff43f897c67a8bcf9046c55c72a427c Mon Sep 17 00:00:00 2001 From: Joe Li Date: Tue, 4 Aug 2026 11:34:17 -0700 Subject: [PATCH 2/2] chore(deps): remove ignored dependency groups --- .github/dependabot.yml | 6 ------ 1 file changed, 6 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 73910a2745a3..503eac824b19 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -64,12 +64,6 @@ updates: babel: patterns: - "@babel/*" - deckgl: - patterns: - - "@deck.gl/*" - lumagl: - patterns: - - "@luma.gl/*" storybook: patterns: - "@storybook/*"