Skip to content

chore(ci): Vendor nx-affected-list action, drop dkhunt27 dependency#20463

Open
mydea wants to merge 3 commits intodevelopfrom
fn/vendor-nx-affected-list
Open

chore(ci): Vendor nx-affected-list action, drop dkhunt27 dependency#20463
mydea wants to merge 3 commits intodevelopfrom
fn/vendor-nx-affected-list

Conversation

@mydea
Copy link
Copy Markdown
Member

@mydea mydea commented Apr 23, 2026

Summary

Replace the third-party dkhunt27/action-nx-affected-list@v6.1 with a vendored composite action at .github/actions/nx-affected-list/.

Why:

  • The external action is outdated (last release Sep 2024) and uses Node.js 20 (GHA deprecation warning)
  • It's a heavy wrapper (~200 lines of compiled JS) around a single command: nx show projects --affected
  • Third-party CI dependencies are a supply chain risk

What the external action did:

  1. nx --version + nx reset (prep)
  2. nx show projects --affected --base=X --head=Y (core logic)
  3. Parse output into a list, set as action output

What the vendored action does:

  • Runs nx show projects --affected directly in bash (~15 lines)
  • Outputs space-separated project names (compatible with existing contains() checks)
  • No Node.js runtime dependency, no nx reset (unnecessary in our setup)

🤖 Generated with Claude Code

@mydea mydea self-assigned this Apr 23, 2026
Copy link
Copy Markdown

@cursor cursor Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 2 potential issues.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 97e427a. Configure here.

Comment thread .github/actions/nx-affected-list/action.yml Outdated
Comment thread .github/actions/nx-affected-list/action.yml Outdated
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 23, 2026

size-limit report 📦

⚠️ Warning: Base artifact is not the latest one, because the latest workflow run is not done yet. This may lead to incorrect results. Try to re-run all tests to get up to date results.

Path Size % Change Change
@sentry/browser 25.96 kB - -
@sentry/browser - with treeshaking flags 24.44 kB - -
@sentry/browser (incl. Tracing) 43.89 kB - -
@sentry/browser (incl. Tracing + Span Streaming) 45.53 kB - -
@sentry/browser (incl. Tracing, Profiling) 48.84 kB - -
@sentry/browser (incl. Tracing, Replay) 83.09 kB - -
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags 72.59 kB - -
@sentry/browser (incl. Tracing, Replay with Canvas) 87.77 kB - -
@sentry/browser (incl. Tracing, Replay, Feedback) 100.03 kB - -
@sentry/browser (incl. Feedback) 42.78 kB - -
@sentry/browser (incl. sendFeedback) 30.64 kB - -
@sentry/browser (incl. FeedbackAsync) 35.64 kB - -
@sentry/browser (incl. Metrics) 27.25 kB - -
@sentry/browser (incl. Logs) 27.38 kB - -
@sentry/browser (incl. Metrics & Logs) 28.07 kB - -
@sentry/react 27.72 kB - -
@sentry/react (incl. Tracing) 46.13 kB - -
@sentry/vue 30.81 kB - -
@sentry/vue (incl. Tracing) 45.71 kB - -
@sentry/svelte 25.98 kB - -
CDN Bundle 28.66 kB - -
CDN Bundle (incl. Tracing) 46.12 kB - -
CDN Bundle (incl. Logs, Metrics) 30.03 kB - -
CDN Bundle (incl. Tracing, Logs, Metrics) 47.17 kB - -
CDN Bundle (incl. Replay, Logs, Metrics) 68.99 kB - -
CDN Bundle (incl. Tracing, Replay) 83.19 kB - -
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 84.22 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback) 88.67 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 89.75 kB - -
CDN Bundle - uncompressed 83.91 kB - -
CDN Bundle (incl. Tracing) - uncompressed 137.82 kB - -
CDN Bundle (incl. Logs, Metrics) - uncompressed 88.06 kB - -
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 141.23 kB - -
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 211.63 kB - -
CDN Bundle (incl. Tracing, Replay) - uncompressed 255.26 kB - -
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 258.66 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 268.17 kB - -
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 271.56 kB - -
@sentry/nextjs (client) 48.66 kB - -
@sentry/sveltekit (client) 44.33 kB - -
@sentry/node-core 58.37 kB +0.02% +7 B 🔺
@sentry/node 175.69 kB +0.01% +12 B 🔺
@sentry/node - without tracing 98.32 kB +0.02% +11 B 🔺
@sentry/aws-serverless 115.35 kB +0.01% +9 B 🔺

View base workflow run

@mydea mydea force-pushed the fn/vendor-nx-affected-list branch from 240bae7 to 8558dc3 Compare April 24, 2026 08:32
mydea and others added 3 commits April 24, 2026 11:17
Replace the third-party dkhunt27/action-nx-affected-list@v6.1 with a
lightweight composite action that runs `nx show projects --affected`
directly. The external action was outdated (last release Sep 2024,
uses Node.js 20) and all it did was shell out to the nx CLI.

The vendored action is ~15 lines of bash with no Node.js runtime
dependency.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@mydea mydea force-pushed the fn/vendor-nx-affected-list branch from 8558dc3 to 2832b37 Compare April 24, 2026 09:17
@mydea mydea requested review from andreiborza and isaacs April 24, 2026 09:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant