Merge remote-tracking branch 'origin/master' into sshin/consolidated-checks

Author: suejungshin

.github/actions/setup-sentry/action.yml

@@ -80,6 +80,15 @@ runs:
           echo "TOTAL_TEST_GROUPS=$MATRIX_INSTANCE_TOTAL" >> $GITHUB_ENV
         fi
 
+    - name: Clear Python cache
+      shell: bash --noprofile --norc -eo pipefail -ux {0}
+      env:
+        WORKDIR: ${{ inputs.workdir }}
+      run: |
+        cd "$WORKDIR"
+        find . -type d -name __pycache__ -exec rm -rf {} + 2>/dev/null || true
+        find . -type f -name "*.pyc" -delete 2>/dev/null || true
+
     - uses: astral-sh/setup-uv@884ad927a57e558e7a70b92f2bccf9198a4be546 # v6
       with:
         version: '0.8.2'

.github/workflows/shuffle-tests.yml

@@ -23,10 +23,6 @@ concurrency:
 env:
   SENTRY_SHUFFLE_TESTS: true
 jobs:
-  per-test-coverage:
-    if: ${{ inputs.per-test-coverage == 'true' || github.event_name == 'schedule' }}
-    uses: ./.github/workflows/codecov_per_test_coverage.yml
-    secrets: inherit
   backend-test:
     name: run backend tests
     runs-on: ubuntu-24.04

eslint.config.mjs

@@ -12,7 +12,6 @@ import * as emotion from '@emotion/eslint-plugin';
 import eslint from '@eslint/js';
 import pluginQuery from '@tanstack/eslint-plugin-query';
 import prettier from 'eslint-config-prettier';
-// @ts-expect-error TS(7016): Could not find a declaration file
 import boundaries from 'eslint-plugin-boundaries';
 import importPlugin from 'eslint-plugin-import';
 import jest from 'eslint-plugin-jest';
@@ -33,6 +32,7 @@ import globals from 'globals';
 import invariant from 'invariant';
 import typescript from 'typescript-eslint';
 
+// eslint-disable-next-line boundaries/element-types
 import * as sentryScrapsPlugin from './static/eslint/eslintPluginScraps/index.mjs';
 
 invariant(react.configs.flat, 'For typescript');
@@ -985,6 +985,9 @@ export default typescript.config([
       boundaries,
     },
     settings: {
+      // Analyze both static and dynamic imports for boundary checks
+      // https://www.jsboundaries.dev/docs/setup/settings/#boundariesdependency-nodes
+      'boundaries/dependency-nodes': ['import', 'dynamic-import'],
       // order matters here because of nested directories
       'boundaries/elements': [
         // --- stories ---
@@ -1099,8 +1102,9 @@ export default typescript.config([
       ...boundaries.configs.strict.rules,
       'boundaries/no-ignored': 'off',
       'boundaries/no-private': 'off',
+      'boundaries/no-unknown': 'off',
       'boundaries/element-types': [
-        'warn',
+        'error',
         {
           default: 'disallow',
           message: '${file.type} is not allowed to import ${dependency.type}',

package.json

@@ -203,7 +203,7 @@
     "eslint": "9.34.0",
     "eslint-config-prettier": "10.1.8",
     "eslint-import-resolver-typescript": "^3.8.3",
-    "eslint-plugin-boundaries": "^5.0.1",
+    "eslint-plugin-boundaries": "5.3.1",
     "eslint-plugin-import": "2.32.0",
     "eslint-plugin-jest": "29.0.1",
     "eslint-plugin-jest-dom": "^5.5.0",

pnpm-lock.yaml

@@ -24,7 +24,12 @@
     MergingOffsetPaginator,
     OffsetPaginator,
 )
-from sentry.api.release_search import FINALIZED_KEY, RELEASE_FREE_TEXT_KEY, parse_search_query
+from sentry.api.release_search import (
+    FINALIZED_KEY,
+    RELEASE_CREATED_KEY,
+    RELEASE_FREE_TEXT_KEY,
+    parse_search_query,
+)
 from sentry.api.serializers import serialize
 from sentry.api.serializers.rest_framework import (
     ReleaseHeadCommitSerializer,
@@ -166,6 +171,13 @@ def _filter_releases_by_query(queryset, organization, query, filter_params):
                 negated=negated,
             )
 
+        if search_filter.key.name == RELEASE_CREATED_KEY:
+            queryset = queryset.filter(
+                **{
+                    f"date_added__{OPERATOR_TO_DJANGO[search_filter.operator]}": search_filter.value.raw_value
+                }
+            )
+
     return queryset
 
 

src/sentry/api/endpoints/organization_releases.py

@@ -15,7 +15,10 @@
 from sentry.integrations.services.integration import RpcIntegration, integration_service
 from sentry.integrations.source_code_management.repository import RepositoryIntegration
 from sentry.issues.auto_source_code_config.code_mapping import find_roots
-from sentry.issues.auto_source_code_config.errors import UnsupportedFrameInfo
+from sentry.issues.auto_source_code_config.errors import (
+    UnexpectedPathException,
+    UnsupportedFrameInfo,
+)
 from sentry.issues.auto_source_code_config.frame_info import FrameInfo, create_frame_info
 from sentry.models.project import Project
 from sentry.models.repository import Repository
@@ -142,7 +145,14 @@ def post(self, request: Request, project: Project) -> Response:
 
         branch = installation.extract_branch_from_source_url(repo, source_url)
         source_path = installation.extract_source_path_from_source_url(repo, source_url)
-        stack_root, source_root = find_roots(frame_info, source_path)
+
+        try:
+            stack_root, source_root = find_roots(frame_info, source_path)
+        except UnexpectedPathException:
+            return self.respond(
+                {"detail": "Could not determine code mapping from provided paths"},
+                status=status.HTTP_400_BAD_REQUEST,
+            )
 
         return self.respond(
             {

src/sentry/api/endpoints/project_repo_path_parsing.py

@@ -12,6 +12,7 @@
 
 RELEASE_FREE_TEXT_KEY = "release_free_text"
 FINALIZED_KEY = "finalized"
+RELEASE_CREATED_KEY = "release.created"
 INVALID_SEMVER_MESSAGE = (
     'Invalid format of semantic version. For searching non-semver releases, use "release:" instead.'
 )
@@ -25,7 +26,9 @@
         SEMVER_BUILD_ALIAS,
         SEMVER_PACKAGE_ALIAS,
         FINALIZED_KEY,
+        RELEASE_CREATED_KEY,
     },
+    date_keys={RELEASE_CREATED_KEY},
     allow_boolean=False,
     free_text_key=RELEASE_FREE_TEXT_KEY,
 )

src/sentry/api/release_search.py

@@ -162,6 +162,7 @@
 )
 from sentry.data_export.endpoints.data_export import DataExportEndpoint
 from sentry.data_export.endpoints.data_export_details import DataExportDetailsEndpoint
+from sentry.data_secrecy.api.waive_data_secrecy import WaiveDataSecrecyEndpoint
 from sentry.discover.endpoints.discover_homepage_query import DiscoverHomepageQueryEndpoint
 from sentry.discover.endpoints.discover_key_transactions import (
     KeyTransactionEndpoint,
@@ -1408,6 +1409,12 @@ def create_group_urls(name_prefix: str) -> list[URLPattern | URLResolver]:
         DataExportDetailsEndpoint.as_view(),
         name="sentry-api-0-organization-data-export-details",
     ),
+    # Data Secrecy
+    re_path(
+        r"^(?P<organization_id_or_slug>[^/]+)/data-secrecy/$",
+        WaiveDataSecrecyEndpoint.as_view(),
+        name="sentry-api-0-data-secrecy",
+    ),
     # Incidents
     re_path(
         r"^(?P<organization_id_or_slug>[^/]+)/incidents/(?P<incident_identifier>[^/]+)/$",