Skip to content

chore(deps): bump d3-array and @types/d3-array in /superset-frontend#36510

Merged
rusackas merged 3 commits into
masterfrom
dependabot/npm_and_yarn/superset-frontend/multi-c967671ab6
Dec 11, 2025
Merged

chore(deps): bump d3-array and @types/d3-array in /superset-frontend#36510
rusackas merged 3 commits into
masterfrom
dependabot/npm_and_yarn/superset-frontend/multi-c967671ab6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Dec 11, 2025

User description

Bumps d3-array and @types/d3-array. These dependencies needed to be updated together.
Updates d3-array from 1.2.4 to 3.2.4

Release notes

Sourced from d3-array's releases.

v3.2.4

  • Fix the return value of d3.medianIndex and d3.quantileIndex when the data contains any missing values. #275

v3.2.3

  • Fix threshold generation when input is empty or has no deviation. #271

v3.2.2

  • d3.ticks now tries harder to generate at least one tick. #264

v3.2.1

  • Fix mutation of user-owned thresholds in d3.bin. #263
  • Fix infinite loop when d3.quantile or d3.quickselect is called with invalid arguments. #262

v3.2.0

v3.1.6

  • Fix incorrect behavior of d3.bisector when given an asymmetric comparator. #249 #250

v3.1.5

v3.1.4

  • Fix off-by-one bin assignment due to rounding error in d3.bin. #247

v3.1.3

  • Significantly improve the performance of d3.bin. #220
  • Tweak the implementation of d3.thresholdScott. a8429c4a55c45b71a7502033925cda342c1fb662

v3.1.2

  • Fix the implementation of d3.thresholdScott. #246

v3.1.1

  • d3.rank can now take a comparator in addition to an accessor. #237
  • d3.rank, d3.sort, d3.bisector, and d3.groupSort now require comparators to have exactly two arguments. #238

v3.1.0

v3.0.4

  • Don’t mangle InternMap or InternSet in the generated UMD bundle.

v3.0.3

... (truncated)

Commits

Updates @types/d3-array from 2.12.7 to 3.2.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

CodeAnt-AI Description

Fix incorrect statistics and instability in D3-based charts by upgrading d3-array and its TypeScript types to v3

What Changed

  • Replaced d3-array v1/2 with v3 across frontend packages and lockfile so D3-based charts use the patched runtime
  • Charts that compute medians, quantiles, ticks, or thresholds now behave correctly with missing, empty, or degenerate data (fixed incorrect median/quantile results, tick generation, and threshold handling)
  • Prevented hangs/crashes caused by invalid arguments (avoids infinite loops) and stopped accidental mutation of user-provided thresholds
  • Updated @types/d3-array to v3 so TypeScript typings match the runtime, reducing type/build mismatches in chart plugins

Impact

✅ Fewer chart crashes or hangs when visualizing malformed or empty datasets
✅ More accurate median/quantile values in charts that contain missing values
✅ Fewer TypeScript build or editor type errors for D3-based chart plugins

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Example

@codeant-ai ask: Can you suggest a safer alternative to storing this secret?

Preserve Org Learnings with CodeAnt

You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:

@codeant-ai: Your feedback here

This helps CodeAnt AI learn and adapt to your team's coding style and standards.

Example

@codeant-ai: Do not flag unused imports.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.

@dependabot dependabot Bot added dependabot npm Dependabot - npm related PRs labels Dec 11, 2025
@dependabot dependabot Bot added dependabot npm Dependabot - npm related PRs labels Dec 11, 2025
@codeant-ai-for-open-source
Copy link
Copy Markdown
Contributor

CodeAnt AI is reviewing your PR.

@bito-code-review
Copy link
Copy Markdown
Contributor

Bito Automatic Review Skipped - Files Excluded

Bito didn't auto-review this change because all changed files are in the exclusion list for automatic reviews. No action is needed if you didn't intend for the agent to review it. Otherwise, to manually trigger a review, type /review in a comment and save.
You can change the excluded files settings here, or contact your Bito workspace admin at evan@preset.io.

@codeant-ai-for-open-source codeant-ai-for-open-source Bot added the size:L This PR changes 100-499 lines, ignoring generated files label Dec 11, 2025
@codeant-ai-for-open-source
Copy link
Copy Markdown
Contributor

CodeAnt AI finished reviewing your PR.

@codeant-ai-for-open-source
Copy link
Copy Markdown
Contributor

💡 Enhance Your PR Reviews

We noticed that 3 feature(s) are not configured for this repository. Enabling these features can help improve your code quality and workflow:

🚦 Quality Gates

Status: Quality Gates are not enabled at the organization level
Learn more about Quality Gates

🎫 Jira Ticket Compliance

Status: Jira credentials file not found. Please configure Jira integration in your settings
Learn more about Jira Integration

⚙️ Custom Rules

Status: No custom rules configured. Add rules via organization settings or .codeant/review.json in your repository
Learn more about Custom Rules


Want to enable these features? Contact your organization admin or check our documentation for setup instructions.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/superset-frontend/multi-c967671ab6 branch from 78ad3e8 to e7f2649 Compare December 11, 2025 16:29
@codeant-ai-for-open-source
Copy link
Copy Markdown
Contributor

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

@rusackas
Copy link
Copy Markdown
Member

d3-array v3 is ESM-only, causing Jest tests to fail with 'Unexpected token export'. Requires Jest config update to handle ESM modules (transformIgnorePatterns).

Bumps [d3-array](https://github.com/d3/d3-array) and [@types/d3-array](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/d3-array). These dependencies needed to be updated together.

Updates `d3-array` from 1.2.4 to 3.2.4
- [Release notes](https://github.com/d3/d3-array/releases)
- [Commits](d3/d3-array@v1.2.4...v3.2.4)

Updates `@types/d3-array` from 2.12.7 to 3.2.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/d3-array)

---
updated-dependencies:
- dependency-name: d3-array
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: "@types/d3-array"
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/superset-frontend/multi-c967671ab6 branch from e7f2649 to d26d34b Compare December 11, 2025 19:57
rusackas and others added 2 commits December 11, 2025 13:19
These packages are now ESM-only and need to be transformed by Babel
during Jest tests to work properly.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
internmap is a transitive dependency of d3-array that uses ESM and
needs to be transformed by Babel during Jest tests.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@codeant-ai-for-open-source
Copy link
Copy Markdown
Contributor

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

@rusackas rusackas merged commit edcb385 into master Dec 11, 2025
63 checks passed
@rusackas rusackas deleted the dependabot/npm_and_yarn/superset-frontend/multi-c967671ab6 branch December 11, 2025 23:09
qfcwell pushed a commit to qfcwell/superset that referenced this pull request May 12, 2026
…pache#36510)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Evan Rusackas <evan@rusackas.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies:needs-work dependencies:npm npm Dependabot - npm related PRs plugins size:L This PR changes 100-499 lines, ignoring generated files size/S

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant