Skip to content

chore(ci): Vendor nx-affected-list action, drop dkhunt27 dependency#20463

Merged
mydea merged 3 commits intodevelopfrom
fn/vendor-nx-affected-list
Apr 28, 2026
Merged

chore(ci): Vendor nx-affected-list action, drop dkhunt27 dependency#20463
mydea merged 3 commits intodevelopfrom
fn/vendor-nx-affected-list

Conversation

@mydea
Copy link
Copy Markdown
Member

@mydea mydea commented Apr 23, 2026

Summary

Replace the third-party dkhunt27/action-nx-affected-list@v6.1 with a vendored composite action at .github/actions/nx-affected-list/.

Why:

  • The external action is outdated (last release Sep 2024) and uses Node.js 20 (GHA deprecation warning)
  • It's a heavy wrapper (~200 lines of compiled JS) around a single command: nx show projects --affected
  • Third-party CI dependencies are a supply chain risk

What the external action did:

  1. nx --version + nx reset (prep)
  2. nx show projects --affected --base=X --head=Y (core logic)
  3. Parse output into a list, set as action output

What the vendored action does:

  • Runs nx show projects --affected directly in bash (~15 lines)
  • Outputs space-separated project names (compatible with existing contains() checks)
  • No Node.js runtime dependency, no nx reset (unnecessary in our setup)

🤖 Generated with Claude Code

@mydea mydea self-assigned this Apr 23, 2026
Copy link
Copy Markdown

@cursor cursor Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 2 potential issues.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 97e427a. Configure here.

Comment thread .github/actions/nx-affected-list/action.yml Outdated
Comment thread .github/actions/nx-affected-list/action.yml Outdated
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 23, 2026

size-limit report 📦

Path Size % Change Change
@sentry/browser 26.16 kB - -
@sentry/browser - with treeshaking flags 24.63 kB - -
@sentry/browser (incl. Tracing) 44.11 kB - -
@sentry/browser (incl. Tracing + Span Streaming) 46.11 kB - -
@sentry/browser (incl. Tracing, Profiling) 49.06 kB - -
@sentry/browser (incl. Tracing, Replay) 83.36 kB - -
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 72.84 kB - -
@sentry/browser (incl. Tracing, Replay with Canvas) 88.03 kB - -
@sentry/browser (incl. Tracing, Replay, Feedback) 100.69 kB - -
@sentry/browser (incl. Feedback) 43.4 kB - -
@sentry/browser (incl. sendFeedback) 30.96 kB - -
@sentry/browser (incl. FeedbackAsync) 36.14 kB - -
@sentry/browser (incl. Metrics) 27.44 kB - -
@sentry/browser (incl. Logs) 27.59 kB - -
@sentry/browser (incl. Metrics & Logs) 28.28 kB - -
@sentry/react 27.9 kB - -
@sentry/react (incl. Tracing) 46.35 kB - -
@sentry/vue 31.03 kB - -
@sentry/vue (incl. Tracing) 45.95 kB - -
@sentry/svelte 26.18 kB - -
CDN Bundle 28.84 kB - -
CDN Bundle (incl. Tracing) 46.65 kB - -
CDN Bundle (incl. Logs, Metrics) 30.25 kB - -
CDN Bundle (incl. Tracing, Logs, Metrics) 47.73 kB - -
CDN Bundle (incl. Replay, Logs, Metrics) 69.25 kB - -
CDN Bundle (incl. Tracing, Replay) 83.75 kB - -
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 84.82 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback) 89.57 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 90.65 kB - -
CDN Bundle - uncompressed 84.55 kB - -
CDN Bundle (incl. Tracing) - uncompressed 139.56 kB - -
CDN Bundle (incl. Logs, Metrics) - uncompressed 88.75 kB - -
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 143.02 kB - -
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 212.39 kB - -
CDN Bundle (incl. Tracing, Replay) - uncompressed 257.07 kB - -
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 260.51 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 270.77 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 274.2 kB - -
@sentry/nextjs (client) 48.84 kB - -
@sentry/sveltekit (client) 44.56 kB - -
@sentry/node-core 58.85 kB +0.02% +9 B 🔺
@sentry/node 169.98 kB +0.01% +12 B 🔺
@sentry/node - without tracing 97.65 kB +0.02% +10 B 🔺
@sentry/aws-serverless 114.39 kB +0.04% +39 B 🔺
@sentry/cloudflare (withSentry) - minified 163.65 kB - -
@sentry/cloudflare (withSentry) 414.17 kB - -

View base workflow run

@mydea mydea force-pushed the fn/vendor-nx-affected-list branch 2 times, most recently from 8558dc3 to 2832b37 Compare April 24, 2026 09:17
@mydea mydea requested review from andreiborza and isaacs April 24, 2026 09:17
Copy link
Copy Markdown
Member

@andreiborza andreiborza left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice, good candidate for vendoring!

mydea and others added 3 commits April 28, 2026 14:03
Replace the third-party dkhunt27/action-nx-affected-list@v6.1 with a
lightweight composite action that runs `nx show projects --affected`
directly. The external action was outdated (last release Sep 2024,
uses Node.js 20) and all it did was shell out to the nx CLI.

The vendored action is ~15 lines of bash with no Node.js runtime
dependency.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@mydea mydea force-pushed the fn/vendor-nx-affected-list branch from 2832b37 to db73856 Compare April 28, 2026 12:03
@mydea mydea merged commit f72f743 into develop Apr 28, 2026
73 checks passed
@mydea mydea deleted the fn/vendor-nx-affected-list branch April 28, 2026 12:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants