Merge branch 'master' into drain-docs-update

Author: stankiewicz

.github/dependabot.yml

@@ -24,7 +24,7 @@ updates:
     schedule:
       interval: "daily"
     exclude-paths:
-    - "/sdks/python/container/**"
+    - "container/**"
   - package-ecosystem: "gradle"
     directory: "/" # Location of package manifests
     schedule:

.github/trigger_files/beam_PostCommit_Go_VR_Flink.json

@@ -2,4 +2,5 @@
   "comment": "Modify this file in a trivial way to cause this test suite to run",
   "modification": 2,
   "https://github.com/apache/beam/pull/32440": "testing datastream optimizations",
+  "pr": "37640"
 }

.github/trigger_files/beam_PostCommit_Java_DataflowV1.json

@@ -3,6 +3,6 @@
   "https://github.com/apache/beam/pull/34902": "Introducing OutputBuilder",
   "https://github.com/apache/beam/pull/35177": "Introducing WindowedValueReceiver to runners",
     "comment": "Modify this file in a trivial way to cause this test suite to run",
-    "modification": 4,
+    "modification": 9,
   "https://github.com/apache/beam/pull/35159": "moving WindowedValue and making an interface"
 }

.github/workflows/assign_milestone.yml

@@ -35,7 +35,7 @@ jobs:
         with:
           fetch-depth: 2
 
-      - uses: actions/github-script@v8
+      - uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs')

.github/workflows/beam_Infrastructure_UsersPermissions.yml

@@ -51,7 +51,7 @@ jobs:
       - name: Setup gcloud
         uses: google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db
       - name: Install Terraform
-        uses: hashicorp/setup-terraform@v3
+        uses: hashicorp/setup-terraform@v4
         with:
           terraform_version: 1.12.2
       - name: Initialize Terraform

.github/workflows/beam_PostCommit_Python_Versions.yml

@@ -88,7 +88,7 @@ jobs:
       (github.event_name == 'schedule' && github.repository == 'apache/beam') ||
       github.event_name == 'workflow_dispatch'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Setup repository
         uses: ./.github/actions/setup-action
         with:
@@ -134,7 +134,7 @@ jobs:
             -PpythonVersion=${{ matrix.python_version }} \
             -Pposargs="--ignore=apache_beam/ml/" \
       - name: Archive Python Test Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: failure()
         with:
           name: Python ${{ matrix.python_version }} Test Results

.github/workflows/beam_PreCommit_Java_Dataflow.yml

@@ -77,7 +77,7 @@ jobs:
       github.event_name == 'workflow_dispatch' ||
       github.event.comment.body == 'Run Java Dataflow Non-portable Worker PreCommit'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Setup repository
         uses: ./.github/actions/setup-action
         with:
@@ -99,7 +99,7 @@ jobs:
             -PdisableCheckStyle=true \
             -PenableJacocoReport
       - name: Archive JUnit Test Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: ${{ !success() }}
         with:
           name: JUnit Test Results
@@ -113,7 +113,7 @@ jobs:
           files: '**/build/test-results/**/*.xml'
           large_files: true
       - name: Archive SpotBugs Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: SpotBugs Results
@@ -125,7 +125,7 @@ jobs:
           name: Publish SpotBugs
           path: '**/build/reports/spotbugs/*.html'
       - name: Archive Jacoco Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: Jacoco Results
           path: '**/build/jacoco/report/**'

.github/workflows/build_release_candidate.yml

@@ -74,7 +74,7 @@ jobs:
             11
       - name: Import GPG key
         id: import_gpg
-        uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec
+        uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
       - name: Auth for nexus
@@ -126,7 +126,7 @@ jobs:
           java-version: '11'
       - name: Import GPG key
         id: import_gpg
-        uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec
+        uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
       - name: stage source
@@ -193,7 +193,7 @@ jobs:
           disable-cache: true
       - name: Import GPG key
         id: import_gpg
-        uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec
+        uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
       - name: Install dependencies
@@ -293,7 +293,7 @@ jobs:
         # settings.xml file
         run: rm ~/.m2/settings.xml || true
       - name: Login to Docker Hub
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121
         with:
           username: ${{ secrets.DOCKERHUB_USER }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -455,7 +455,7 @@ jobs:
           go-version: '1.26'
       - name: Import GPG key
         id: import_gpg
-        uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec
+        uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
       - name: Build prism artifacts

.github/workflows/build_runner_image.yml

@@ -47,7 +47,7 @@ jobs:
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
     - name: Build and Load to docker
-      uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+      uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
       with:
         context: ${{ env.working-directory }}
         load: true
@@ -57,7 +57,7 @@ jobs:
     - name: Push Docker image
       if: github.ref == 'refs/heads/master'
       id: docker_build
-      uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294
+      uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
       with:
         context: ${{ env.working-directory }}
         push: true

.github/workflows/build_wheels.yml

@@ -202,7 +202,7 @@ jobs:
     if: needs.check_env_variables.outputs.gcp-variables-set == 'true'
     steps:
       - name: Download compressed sources from artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: source_zip
           path: source/
@@ -231,13 +231,13 @@ jobs:
         py_version: ["cp310-", "cp311-", "cp312-", "cp313-", "cp314-"]
     steps:
     - name: Download python source distribution from artifacts
-      uses: actions/download-artifact@v7
+      uses: actions/download-artifact@v8
       with:
         name: source
         path: apache-beam-source
     - name: Download Python SDK RC source distribution from artifacts
       if: ${{ needs.build_source.outputs.is_rc == 1 }}
-      uses: actions/download-artifact@v7
+      uses: actions/download-artifact@v8
       with:
         name: source_rc${{ needs.build_source.outputs.rc_num }}
         path: apache-beam-source-rc
@@ -314,7 +314,7 @@ jobs:
     if: needs.check_env_variables.outputs.gcp-variables-set == 'true' && github.event_name != 'pull_request'
     steps:
     - name: Download wheels from artifacts
-      uses: actions/download-artifact@v7
+      uses: actions/download-artifact@v8
       with:
         pattern: wheelhouse-*
         merge-multiple: true