Skip to content

chore: bump deps - #15729

Merged
darkskygit merged 3 commits into
canaryfrom
darksky/bump-deps-1022
Oct 22, 2026
Merged

darkskygit merged 3 commits into
canaryfrom
darksky/bump-deps-1022

Conversation

@darkskygit

@darkskygit darkskygit commented Oct 22, 2026 •

Copy link
Copy Markdown
Member

PR Dependency Tree

This tree was auto-generated by Charcoal

Summary by CodeRabbit

  • Deployment
    • Updated the Cloud SQL Proxy image and integrated it with deployment charts.
    • Containers now run with stricter security settings, including non-root execution and read-only filesystems.
  • Desktop
    • Updated Electron and Node versions and adjusted Windows builds to support multiple architectures.
  • Maintenance
    • Updated Vite and Storybook versions across development tools.
    • Improved production GraphQL schema handling.

@coderabbitai

coderabbitai Bot commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Review in Change Stack →

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1
  • yarn.lock is excluded by !**/yarn.lock, !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 5d9754ef-c9d9-4fd0-8a0b-2392550aaa56

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
📝 Walkthrough

This PR adds Cloud SQL Proxy image publishing and Helm integration, configures workload security contexts, updates Electron installation and release setup, refreshes frontend dependencies, and changes production GraphQL schema generation.

Changes: Deployment and workload configuration

Layer / File(s) Summary
Build and publish the Cloud SQL Proxy image
.github/deployment/cloud-sql-proxy/Dockerfile, .github/workflows/build-images.yml, .github/deployment/node/Dockerfile
A workflow builds and publishes a Cloud SQL Proxy image for linux/amd64 and linux/arm64. The image uses a Go build stage and a nonroot distroless runtime. The Node runtime image adds ca-certificates.
Connect the proxy chart to AFFiNE
.github/helm/affine/Chart.yaml, .github/helm/affine/values.yaml, .github/actions/deploy/deploy.mjs, .github/helm/affine/charts/*/Chart.yaml, .github/helm/affine/charts/gcloud-sql-proxy/*
The AFFiNE chart adds local dependencies for front, GraphQL, and the Cloud SQL Proxy. Front and GraphQL remove their proxy dependencies. The proxy chart uses the global database setting and updated image configuration. Deployment configuration enables the global setting.
Configure workload security and temporary storage
.github/helm/affine/charts/front/*, .github/helm/affine/charts/graphql/*, .github/helm/affine/values.yaml
Front and GraphQL deployments apply configured pod and container security contexts and mount writable temporary volumes. Worker pods gain non-root identity and a RuntimeDefault seccomp profile.

Electron and frontend toolchain

Layer / File(s) Summary
Update Electron installation and release setup
.github/actions/setup-node/action.yml, .github/workflows/release-desktop.yml, .nvmrc, package.json, packages/frontend/apps/electron/*, tools/utils/src/workspace.gen.ts
The setup action reads Electron’s version from its package metadata and runs yarn install-electron. Electron scripts use r, and the Electron dependency range changes. The Windows release sets ELECTRON_INSTALL_ARCH. The release workflow reads Node from .nvmrc, which changes to 22.23.4. The Electron TypeScript project adds a tools/cli reference, also listed as a workspace dependency.
Update frontend development dependencies
package.json, blocksuite/*/package.json, packages/frontend/component/package.json, packages/frontend/core/package.json
Vite dependency ranges change to ^7.3.7 in the root, Blocksuite, and frontend packages. Storybook dependency ranges change to ^10.6.3 in the frontend component package.

GraphQL schema generation

Layer / File(s) Summary
Select the GraphQL schema output
packages/backend/server/src/base/graphql/index.ts
Apollo configuration selects in-memory schema generation in production and retains file-based schema paths outside production.

Priority: ➖ Normal

Estimated code review effort: 3 (Moderate) | ~30 minutes

Change: Other

Sequence Diagram(s)

sequenceDiagram
  participant BuildImagesWorkflow
  participant CloudSQLProxyDockerfile
  participant GHCR
  BuildImagesWorkflow->>CloudSQLProxyDockerfile: Build image for linux/amd64 and linux/arm64
  BuildImagesWorkflow->>GHCR: Publish cloud-sql-proxy-2.26.2
Loading

Possibly related issues

Suggested reviewers: l-sun

Merge Risk: 🟠 High · up to 73519

These deployments can time out before the application starts. Point the startup checks at the Cloud SQL Proxy Service before merging.

Pre-merge checks: Passed 4 · Inconclusive 1

Failed Failed checks: 1 inconclusive

Check name Status Explanation Resolution
Title check Inconclusive The title identifies dependency updates, which are present, but it is too broad for a changeset that also modifies Cloud SQL Proxy deployment, Helm configuration, security contexts, Electron tooling, … Use a specific title that names the primary change, such as "chore: update Electron and Vite dependencies and Cloud SQL Proxy deployment".
Passed Passed checks: 4 passed
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 3…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 3 files. (9 skipped: 9 unsupported.)

Full details: Title check

Explanation

The title identifies dependency updates, which are present, but it is too broad for a changeset that also modifies Cloud SQL Proxy deployment, Helm configuration, security contexts, Electron tooling, and CI workflows.

Resolution

Use a specific title that names the primary change, such as "chore: update Electron and Vite dependencies and Cloud SQL Proxy deployment".

✨ Finishing Touches
📝 Generate docstrings
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

Deploying blocksuite-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: 7351903
Status: ✅  Deploy successful!
Preview URL: https://6c88e08d.blocksuite-docs.pages.dev
Branch Preview URL: https://darksky-bump-deps-1022.blocksuite-docs.pages.dev

View logs

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2


ℹ️ Review info
⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 3bb9c72a-77e0-4586-ad6b-b5e3a824ca67
📥 Commits

Reviewing files that changed from the base of the PR and between 0b69a6d and 8d7668f.

⛔ Files ignored due to path filters: 2
  • Cargo.lock is excluded by !**/*.lock
  • yarn.lock is excluded by !**/yarn.lock, !**/*.lock
📒 Files selected for processing: 24
  • .github/actions/setup-node/action.yml
  • .github/deployment/cloud-sql-proxy/Dockerfile
  • .github/deployment/node/Dockerfile
  • .github/helm/affine/Chart.yaml
  • .github/helm/affine/charts/front/Chart.yaml
  • .github/helm/affine/charts/front/templates/deployment.yaml
  • .github/helm/affine/charts/front/values.yaml
  • .github/helm/affine/charts/gcloud-sql-proxy/Chart.yaml
  • .github/helm/affine/charts/gcloud-sql-proxy/templates/deployment.yaml
  • .github/helm/affine/charts/gcloud-sql-proxy/values.yaml
  • .github/helm/affine/charts/graphql/Chart.yaml
  • .github/helm/affine/charts/graphql/templates/deployment.yaml
  • .github/helm/affine/charts/graphql/values.yaml
  • .github/helm/affine/values.yaml
  • .github/workflows/build-images.yml
  • .github/workflows/release-desktop.yml
  • .nvmrc
  • blocksuite/integration-test/package.json
  • blocksuite/playground/package.json
  • package.json
  • packages/backend/server/src/base/graphql/index.ts
  • packages/frontend/apps/electron/package.json
  • packages/frontend/component/package.json
  • packages/frontend/core/package.json
💤 Files with no reviewable changes: 2
  • .github/helm/affine/charts/front/Chart.yaml
  • .github/helm/affine/charts/graphql/Chart.yaml

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

Comment thread .github/helm/affine/Chart.yaml Outdated
Comment thread .github/helm/affine/charts/graphql/values.yaml
@codecov

codecov Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 62.50000% with 3 lines in your changes missing coverage. Please review.
✅ Project coverage is 54.64%. Comparing base (0b69a6d) to head (ead290a).
⚠️ Report is 1 commits behind head on canary.

Files with missing lines Patch % Lines
packages/backend/server/src/base/graphql/index.ts 62.50% 3 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##           canary   #15729      +/-   ##
==========================================
+ Coverage   54.62%   54.64%   +0.02%     
==========================================
  Files        4024     4024              
  Lines      193186   193188       +2     
  Branches    31321    31334      +13     
==========================================
+ Hits       105530   105570      +40     
+ Misses      83695    83667      -28     
+ Partials     3961     3951      -10     
Flag Coverage Δ
server-test 78.44% <62.50%> (+0.08%) ⬆️
unittest 33.81% <ø> (-0.03%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions github-actions Bot added the test Related to test cases label Oct 22, 2026

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1


ℹ️ Review info
⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 61c90dda-26fd-4afa-92b5-9d0fe44d3bc2
📥 Commits

Reviewing files that changed from the base of the PR and between 8d7668f and 7351903.

📒 Files selected for processing: 11
  • .github/actions/deploy/deploy.mjs
  • .github/helm/affine/Chart.yaml
  • .github/helm/affine/charts/gcloud-sql-proxy/templates/NOTES.txt
  • .github/helm/affine/charts/gcloud-sql-proxy/templates/deployment.yaml
  • .github/helm/affine/charts/gcloud-sql-proxy/templates/service.yaml
  • .github/helm/affine/charts/gcloud-sql-proxy/templates/serviceaccount.yaml
  • .github/helm/affine/charts/gcloud-sql-proxy/templates/tests/test-connection.yaml
  • .github/helm/affine/charts/gcloud-sql-proxy/values.yaml
  • .github/helm/affine/values.yaml
  • packages/frontend/apps/electron/tsconfig.json
  • tools/utils/src/workspace.gen.ts
🚧 Files skipped from review as they are similar to previous changes: 2
  • .github/helm/affine/Chart.yaml
  • .github/helm/affine/charts/gcloud-sql-proxy/values.yaml

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 8 remain after this review.

isProduction || isBeta || isInternal
? [
`--set cloud-sql-proxy.enabled=true`,
`--set global.database.gcloud.enabled=true`,

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🩺 Stability & Availability | 🟠 Major | ⚡ Quick win

🔎 Supported by static analysis

🏁 Script executed:

sed -n '35,90p' .github/actions/deploy/deploy.mjs
rg -n 'global.database.host|DATABASE_URL|9801/startup|gcloud-sql-proxy|cloud-sql-proxy' .github/helm/affine .github/actions/deploy

Repository: toeverything/AFFiNE

Length of output: 10730


🏁 Script executed:

set -e
printf '%s\n' '--- deploy action and env bindings ---'
sed -n '1,115p' .github/actions/deploy/deploy.mjs
rg -n -C 5 -F -- 'DATABASE_URL' .github .env* 2>/dev/null || test "$?" -eq 1
printf '%s\n' '--- chart values and database contract ---'
sed -n '1,180p' .github/helm/affine/values.yaml
rg -n -C 5 -e 'database:' -e 'host:' -e 'port:' -e 'gcloud' .github/helm/affine/values.yaml .github/helm/affine/charts
printf '%s\n' '--- proxy helpers, service, deployment, and values ---'
sed -n '1,100p' .github/helm/affine/charts/gcloud-sql-proxy/_helpers.tpl
sed -n '1,100p' .github/helm/affine/charts/gcloud-sql-proxy/templates/service.yaml
sed -n '1,100p' .github/helm/affine/charts/gcloud-sql-proxy/templates/deployment.yaml
sed -n '1,100p' .github/helm/affine/charts/gcloud-sql-proxy/values.yaml
printf '%s\n' '--- startup and database consumers ---'
sed -n '1,110p' .github/helm/affine/charts/front/templates/deployment.yaml
sed -n '1,110p' .github/helm/affine/charts/graphql/templates/deployment.yaml
sed -n '1,75p' .github/helm/affine/charts/graphql/templates/migration.yaml
sed -n '1,105p' .github/helm/affine/templates/worker-deployment.yaml
printf '%s\n' '--- explicit host documentation and alternative bindings ---'
rg -n -C 4 -i -e 'DATABASE_URL' -e 'global\.database\.host' -e 'cloud.?sql.?proxy' -e 'connectionName' --glob '!**/node_modules/**' --glob '!**/dist/**' README.md docs .github 2>/dev/null || test "$?" -eq 1

Repository: toeverything/AFFiNE

Length of output: 20191


🏁 Script executed:

set -u
printf '%s\n' '--- chart values and conditions ---'
nl -ba .github/helm/affine/values.yaml | sed -n '1,180p'
rg -n -C 6 -e 'database:' -e 'gcloud' -e 'enabled' .github/helm/affine/values.yaml .github/helm/affine/templates .github/helm/affine/charts
printf '%s\n' '--- proxy Service identity and ports ---'
nl -ba .github/helm/affine/charts/gcloud-sql-proxy/_helpers.tpl | sed -n '1,90p'
nl -ba .github/helm/affine/charts/gcloud-sql-proxy/templates/service.yaml | sed -n '1,80p'
nl -ba .github/helm/affine/charts/gcloud-sql-proxy/templates/deployment.yaml | sed -n '1,95p'
nl -ba .github/helm/affine/charts/gcloud-sql-proxy/values.yaml | sed -n '1,80p'
printf '%s\n' '--- startup consumers ---'
nl -ba .github/helm/affine/charts/front/templates/deployment.yaml | sed -n '25,95p'
nl -ba .github/helm/affine/charts/graphql/templates/deployment.yaml | sed -n '25,95p'
nl -ba .github/helm/affine/charts/graphql/templates/migration.yaml | sed -n '15,60p'
printf '%s\n' '--- workflow and action metadata ---'
nl -ba .github/workflows/release-cloud.yml | sed -n '35,90p'
nl -ba .github/actions/deploy/action.yml | sed -n '1,180p'
printf '%s\n' '--- DATABASE_URL format and host contract search ---'
rg -n -C 4 -i -e 'DATABASE_URL' -e 'global\.database\.host' -e 'cloud.?sql.?proxy' -e 'connectionName' --glob '!**/node_modules/**' --glob '!**/dist/**' --glob '!**/.git/**' . 2>/dev/null || test "$?" -eq 1

Repository: toeverything/AFFiNE

Length of output: 42105


🏁 Script executed:

set -e
printf '%s\n' '--- helm release invocation ---'
nl -ba .github/actions/deploy/deploy.mjs | sed -n '105,190p'
printf '%s\n' '--- proxy fullname and Service ---'
nl -ba .github/helm/affine/charts/gcloud-sql-proxy/templates/_helpers.tpl | sed -n '8,26p'
nl -ba .github/helm/affine/charts/gcloud-sql-proxy/templates/service.yaml | sed -n '1,25p'
nl -ba .github/helm/affine/charts/gcloud-sql-proxy/values.yaml | sed -n '1,35p'
printf '%s\n' '--- front and GraphQL startup paths ---'
nl -ba .github/helm/affine/charts/front/templates/deployment.yaml | sed -n '28,48p'
nl -ba .github/helm/affine/charts/graphql/templates/deployment.yaml | sed -n '28,48p'
nl -ba .github/helm/affine/charts/graphql/templates/migration.yaml | sed -n '15,38p'
printf '%s\n' '--- DATABASE_URL contract ---'
nl -ba packages/backend/server/src/base/prisma/config.ts | sed -n '12,23p'
nl -ba .github/workflows/release-cloud.yml | sed -n '43,63p'

Repository: toeverything/AFFiNE

Length of output: 9932


Pass the Cloud SQL Proxy Service name as global.database.host.

Stable, beta, and internal deploys pass the PostgreSQL DATABASE_URL to global.database.host. The front and GraphQL init containers then poll that value on port 9801, instead of polling the affine-cloud-sql-proxy Service. The pods can remain in their init containers until Helm's 10-minute timeout, causing the deployment to fail.

Suggested fix
-          `--set-string global.database.host=${DATABASE_URL}`,
+          `--set-string global.database.host=affine-cloud-sql-proxy`,

@darkskygit
darkskygit merged commit e32f8dc into canary Oct 22, 2026
3 checks passed
@darkskygit
darkskygit deleted the darksky/bump-deps-1022 branch October 22, 2026 08:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

1 participant