Skip to content

Commit df10ba8

Browse files
gbrgrgbrgr
authored
Merge pull request #75 from RelationalAI/sync/upstream-main
Sync/upstream main
2 parents 4182137 + 7210970 commit df10ba8

71 files changed

Lines changed: 10007 additions & 5516 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.cargo/audit.toml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,4 +33,9 @@ ignore = [
3333
#
3434
# Introduced by object_store, see https://github.com/apache/arrow-rs-object-store/issues/564
3535
"RUSTSEC-2025-0134",
36+
# `rand` unsoundness with custom logger using `rand::rng()`
37+
#
38+
# Direct dependency upgraded to 0.9.3+. Transitive rand 0.8.5 remains
39+
# from reqsign/sqllogictest/rustc-hash — no 0.8.x patch exists.
40+
"RUSTSEC-2026-0097",
3641
]

‎.github/workflows/asf-allowlist-check.yml‎

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -43,5 +43,4 @@ jobs:
4343
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4444
with:
4545
persist-credentials: false
46-
# Intentionally unpinned to always use the latest allowlist from the ASF.
47-
- uses: apache/infrastructure-actions/allowlist-check@main # zizmor: ignore[unpinned-uses]
46+
- uses: apache/infrastructure-actions/allowlist-check@4e9c961f587f72b170874b6f5cd4ac15f7f26eb8 # main

‎.github/workflows/audit.yml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,10 @@ on:
3737
- cron: '0 0 * * *'
3838

3939
permissions:
40+
# All other permissions are set to none
4041
contents: read
42+
checks: write
43+
issues: write
4144

4245
jobs:
4346
security_audit:

‎.github/workflows/bindings_python_ci.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ jobs:
6363
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
6464
with:
6565
persist-credentials: false
66-
- uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
66+
- uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
6767
with:
6868
version: "0.9.3"
6969
enable-cache: true
@@ -95,12 +95,12 @@ jobs:
9595
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
9696
with:
9797
python-version: 3.12
98-
- uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1.50.1
98+
- uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
9999
with:
100100
working-directory: "bindings/python"
101101
command: build
102102
args: --out dist -i python3.12 # Explicitly set interpreter; manylinux containers have multiple Pythons and maturin may pick an older one
103-
- uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
103+
- uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
104104
with:
105105
version: "0.9.3"
106106
enable-cache: true

‎.github/workflows/ci.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -163,7 +163,7 @@ jobs:
163163

164164
- name: Install cargo-nextest
165165
if: matrix.test-suite.name == 'default'
166-
uses: taiki-e/install-action@0fde6d128a3d980ceac30be8c8b8739abd963b81 # v2.70.0
166+
uses: taiki-e/install-action@055f5df8c3f65ea01cd41e9dc855becd88953486 # v2.75.18
167167
with:
168168
tool: cargo-nextest
169169

‎.github/workflows/ci_typos.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,4 +47,4 @@ jobs:
4747
with:
4848
persist-credentials: false
4949
- name: Check typos
50-
uses: crate-ci/typos@631208b7aac2daa8b707f55e7331f9112b0e062d # v1.44.0
50+
uses: crate-ci/typos@cf5f1c29a8ac336af8568821ec41919923b05a83 # v1.45.1

‎.github/workflows/codeql.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,11 +46,11 @@ jobs:
4646
persist-credentials: false
4747

4848
- name: Initialize CodeQL
49-
uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
49+
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
5050
with:
5151
languages: actions
5252

5353
- name: Perform CodeQL Analysis
54-
uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
54+
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
5555
with:
5656
category: "/language:actions"

‎.github/workflows/release_python.yml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -61,21 +61,21 @@ jobs:
6161
exit 1
6262
fi
6363
echo "✅ Release tag format is valid: $RELEASE_TAG"
64-
64+
6565
# Strip 'v' prefix for cargo version
6666
CARGO_VERSION="${RELEASE_TAG#v}"
6767
echo "Cargo version (without v prefix): $CARGO_VERSION"
68-
68+
6969
# For manual triggers, validate that the tag matches the version in Cargo.toml
7070
if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then
7171
# Extract base version (without -rc.X suffix) for comparison with Cargo.toml
7272
BASE_VERSION="${CARGO_VERSION%-rc.*}"
7373
echo "Base version (for Cargo.toml comparison): $BASE_VERSION"
74-
74+
7575
# Read version from Cargo.toml and validate it matches
7676
CARGO_TOML_VERSION=$(grep '^version = ' bindings/python/Cargo.toml | head -1 | sed 's/version = "\(.*\)"/\1/')
7777
echo "Version in bindings/python/Cargo.toml: $CARGO_TOML_VERSION"
78-
78+
7979
if [ "$BASE_VERSION" != "$CARGO_TOML_VERSION" ]; then
8080
echo "❌ Version mismatch!"
8181
echo " Release tag base version: $BASE_VERSION"
@@ -85,7 +85,7 @@ jobs:
8585
fi
8686
echo "✅ Version matches bindings/python/Cargo.toml"
8787
fi
88-
88+
8989
# Check if this is a release candidate
9090
if [[ "$RELEASE_TAG" =~ -rc\.[0-9]+$ ]]; then
9191
IS_RC="true"
@@ -94,7 +94,7 @@ jobs:
9494
IS_RC="false"
9595
echo "This is a stable release"
9696
fi
97-
97+
9898
# Set outputs for other jobs to use
9999
echo "cargo-version=$CARGO_VERSION" >> $GITHUB_OUTPUT
100100
echo "is-rc=$IS_RC" >> $GITHUB_OUTPUT
@@ -110,7 +110,7 @@ jobs:
110110
- name: Install toml-cli
111111
if: ${{ needs.validate-release-tag.outputs.is-rc == 'true' }}
112112
run: cargo install toml-cli
113-
113+
114114
- name: Set cargo version for RC
115115
if: ${{ needs.validate-release-tag.outputs.is-rc == 'true' }}
116116
working-directory: "bindings/python"
@@ -124,13 +124,13 @@ jobs:
124124
env:
125125
NEEDS_VALIDATE_RELEASE_TAG_OUTPUTS_CARGO_VERSION: ${{ needs.validate-release-tag.outputs.cargo-version }}
126126

127-
- uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1.50.1
127+
- uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
128128
with:
129129
working-directory: "bindings/python"
130130
command: sdist
131131
args: -o dist
132132
- name: Upload sdist
133-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
133+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
134134
with:
135135
name: wheels-sdist
136136
path: bindings/python/dist
@@ -159,7 +159,7 @@ jobs:
159159
- name: Install toml-cli
160160
if: ${{ needs.validate-release-tag.outputs.is-rc == 'true' }}
161161
run: cargo install toml-cli
162-
162+
163163
- name: Set cargo version for RC
164164
if: ${{ needs.validate-release-tag.outputs.is-rc == 'true' }}
165165
working-directory: "bindings/python"
@@ -184,15 +184,15 @@ jobs:
184184
uses: ./.github/actions/setup-builder
185185
with:
186186
rust-version: ${{ steps.get-msrv.outputs.msrv }}
187-
- uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1.50.1
187+
- uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
188188
with:
189189
target: ${{ matrix.target }}
190190
manylinux: ${{ matrix.manylinux || 'auto' }}
191191
working-directory: "bindings/python"
192192
command: build
193193
args: --release -o dist -i python3.12 # Explicitly set interpreter; manylinux containers have multiple Pythons and maturin may pick an older one
194194
- name: Upload wheels
195-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
195+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
196196
with:
197197
name: wheels-${{ matrix.os }}-${{ matrix.target }}
198198
path: bindings/python/dist

‎.github/workflows/release_python_nightly.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -48,14 +48,14 @@ jobs:
4848
with:
4949
timestamp: ${{ needs.set-version.outputs.TIMESTAMP }}
5050

51-
- uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1.50.1
51+
- uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
5252
with:
5353
working-directory: "bindings/python"
5454
command: sdist
5555
args: -o dist
5656

5757
- name: Upload sdist
58-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
58+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
5959
with:
6060
name: wheels-sdist
6161
path: bindings/python/dist
@@ -98,7 +98,7 @@ jobs:
9898
with:
9999
rust-version: ${{ steps.get-msrv.outputs.msrv }}
100100

101-
- uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1.50.1
101+
- uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
102102
with:
103103
target: ${{ matrix.target }}
104104
manylinux: ${{ matrix.manylinux || 'auto' }}
@@ -107,7 +107,7 @@ jobs:
107107
args: --release -o dist -i python3.12 # Explicitly set interpreter; manylinux containers have multiple Pythons and maturin may pick an older one
108108

109109
- name: Upload wheels
110-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
110+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
111111
with:
112112
name: wheels-${{ matrix.os }}-${{ matrix.target }}
113113
path: bindings/python/dist

‎.github/workflows/zizmor.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,6 @@ jobs:
3939
persist-credentials: false
4040

4141
- name: Run zizmor 🌈
42-
uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
42+
uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
4343
with:
4444
advanced-security: false

0 commit comments

Comments
 (0)