fixes

Author: lidavidm

.github/workflows/integration.yml

@@ -328,7 +328,7 @@ jobs:
         env:
           BUILD_ALL: "0"
           BUILD_DRIVER_SNOWFLAKE: "1"
-          ADBC_SNOWFLAKE_URI: ${{ secrets.SNOWFLAKE_URI }}
+          ADBC_SNOWFLAKE_URI: ${{ secrets.SNOWFLAKE_URI }} # zizmor: ignore[secrets-outside-env]
         run: |
           ./ci/scripts/cpp_build.sh "$(pwd)" "$(pwd)/build"
           ./ci/scripts/cpp_test.sh "$(pwd)/build"
@@ -337,7 +337,7 @@ jobs:
           BUILD_ALL: "0"
           BUILD_DRIVER_MANAGER: "1"
           BUILD_DRIVER_SNOWFLAKE: "1"
-          ADBC_SNOWFLAKE_URI: ${{ secrets.SNOWFLAKE_URI }}
+          ADBC_SNOWFLAKE_URI: ${{ secrets.SNOWFLAKE_URI }} # zizmor: ignore[secrets-outside-env]
         run: |
           ./ci/scripts/python_build.sh "$(pwd)" "$(pwd)/build"
           env BUILD_DRIVER_MANAGER=0 ./ci/scripts/python_test.sh "$(pwd)" "$(pwd)/build"

.github/workflows/native-unix.yml

@@ -407,7 +407,7 @@ jobs:
       - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093  # v3.0.0
         continue-on-error: true # if auth fails, bigquery driver tests should skip
         with:
-          workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
+          workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }} # zizmor: ignore[secrets-outside-env]
       # XXX: https://github.com/actions/setup-go/issues/457
       # We can't use go-version-file for setup-go because it doesn't understand
       # the 'toolchain' parameter and staticcheck tends to need the latest Go
@@ -429,7 +429,7 @@ jobs:
           ./ci/scripts/go_build.sh "$(pwd)" "$(pwd)/build" "$HOME/local"
       - name: Go Test
         env:
-          SNOWFLAKE_URI: ${{ secrets.SNOWFLAKE_URI }}
+          SNOWFLAKE_URI: ${{ secrets.SNOWFLAKE_URI }} # zizmor: ignore[secrets-outside-env]
         run: |
           ./ci/scripts/go_test.sh "$(pwd)" "$(pwd)/build" "$HOME/local"
 
@@ -461,7 +461,7 @@ jobs:
       - uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093  # v3.0.0
         continue-on-error: true # if auth fails, bigquery driver tests should skip
         with:
-          workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
+          workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }} # zizmor: ignore[secrets-outside-env]
       - name: Get required Go version
         run: |
           (. .env && echo "GO_VERSION=${GO}") >> $GITHUB_ENV
@@ -512,7 +512,7 @@ jobs:
 
       - name: Go Test
         env:
-          SNOWFLAKE_URI: ${{ secrets.SNOWFLAKE_URI }}
+          SNOWFLAKE_URI: ${{ secrets.SNOWFLAKE_URI }} # zizmor: ignore[secrets-outside-env]
         run: |
           export PATH=$RUNNER_TOOL_CACHE/go/${GO_VERSION}/${{ matrix.goarch }}/bin:$PATH
           ./ci/scripts/go_test.sh "$(pwd)" "$(pwd)/build" "$HOME/local"

.github/workflows/packaging.yml

@@ -1355,14 +1355,14 @@ jobs:
           # Clean all existing packages, OK if we fail
           ./ci/scripts/python_conda_clean.sh
         env:
-          ANACONDA_API_TOKEN: ${{ secrets.ANACONDA_API_TOKEN }}
+          ANACONDA_API_TOKEN: ${{ secrets.ANACONDA_API_TOKEN }} # zizmor: ignore[secrets-outside-env]
       - name: Upload
         run: |
           ls -laR conda-packages
           # Upload fresh packages
           ./ci/scripts/python_conda_upload.sh conda-packages/python-*-conda/*/*.tar.bz2
         env:
-          ANACONDA_API_TOKEN: ${{ secrets.ANACONDA_API_TOKEN }}
+          ANACONDA_API_TOKEN: ${{ secrets.ANACONDA_API_TOKEN }} # zizmor: ignore[secrets-outside-env]
 
   # This takes a while due to sleeping to avoid rate limits, so run it first
   # and in parallel with the builds
@@ -1383,7 +1383,7 @@ jobs:
           pip install requests
           ./ci/scripts/gemfury_clean.py
         env:
-          GEMFURY_API_TOKEN: ${{ secrets.GEMFURY_API_TOKEN }}
+          GEMFURY_API_TOKEN: ${{ secrets.GEMFURY_API_TOKEN }} # zizmor: ignore[secrets-outside-env]
 
   upload-gemfury:
     name: "Upload packages to Gemfury"
@@ -1428,6 +1428,6 @@ jobs:
           # Node.js
           ./ci/scripts/node_npm_upload.sh upload-staging
         env:
-          GEMFURY_PUSH_TOKEN: ${{ secrets.GEMFURY_PUSH_TOKEN }}
+          GEMFURY_PUSH_TOKEN: ${{ secrets.GEMFURY_PUSH_TOKEN }} # zizmor: ignore[secrets-outside-env]
           NPM_REGISTRY: https://npm.fury.io/arrow-adbc-nightlies/
-          NPM_TOKEN: ${{ secrets.GEMFURY_PUSH_TOKEN }}
+          NPM_TOKEN: ${{ secrets.GEMFURY_PUSH_TOKEN }} # zizmor: ignore[secrets-outside-env]

.github/workflows/r-check.yml

@@ -107,7 +107,7 @@ jobs:
 
       - uses: r-lib/actions/check-r-package@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590  # v2
         env:
-          ADBC_SNOWFLAKE_TEST_URI: ${{ secrets.SNOWFLAKE_URI }}
+          ADBC_SNOWFLAKE_TEST_URI: ${{ secrets.SNOWFLAKE_URI }} # zizmor: ignore[secrets-outside-env]
           R_KEEP_PKG_SOURCE: yes
         with:
           working-directory: r/${{ inputs.pkg }}

c/integration/static_test/CMakeLists.txt

@@ -21,6 +21,16 @@ project(adbc-static-test LANGUAGES C CXX)
 set(CMAKE_C_STANDARD 11)
 set(CMAKE_C_STANDARD_REQUIRED ON)
 
+find_package(SQLite3)
+if(SQLite3_FOUND)
+  # SQLite::SQLite3 is deprecated in newer cmake. Alias to support CMake < 4.3.
+  # See https://cmake.org/cmake/help/latest/module/FindSQLite3.html.
+  if(NOT TARGET SQLite3::SQLite3)
+    add_library(SQLite3::SQLite3 ALIAS SQLite::SQLite3)
+  endif()
+  set(SQLite3_LINK_LIBRARIES SQLite3::SQLite3)
+endif()
+
 find_package(AdbcDriverCommon REQUIRED)
 find_package(AdbcDriverFramework REQUIRED)
 

ci/scripts/verify_ubuntu.sh

@@ -25,7 +25,7 @@
 set -euo pipefail
 
 : ${JDK:=21}
-: ${MAVEN:=3.9.14}
+: ${MAVEN:=3.9.15}
 
 main() {
     local -r source_dir="${1}"