Merge remote-tracking branch 'origin/master' into bot/reduce-noisy-public-logs

# Conflicts:
#	crates/client-api/src/routes/subscribe.rs
#	crates/core/src/client/client_connection.rs
#	crates/core/src/host/wasm_common/module_host_actor.rs

Author: clockwork-labs-bot

.gitattributes

@@ -1,3 +1,4 @@
 **/module_bindings/** linguist-generated=true eol=lf
+**/ModuleBindings/** linguist-generated=true eol=lf
 /docs/llms/** linguist-generated=true
 /docs/llms/*-details.json linguist-generated=false

.github/CODEOWNERS

@@ -8,9 +8,11 @@ LICENSE.txt @cloutiertyler
 /crates/cli/src/ @bfops @cloutiertyler @jdetter
 /tools/ci/ @bfops @cloutiertyler @jdetter
 /tools/ci/src/keynote_bench.rs @joshua-spacetime @cloutiertyler @jdetter
-/tools/upgrade-version/ @bfops @jdetter @cloutiertyler
+/tools/upgrade-version/ @bfops @jdetter @cloutiertyler @rekhoff
+/tools/release/ @bfops @jdetter @cloutiertyler @rekhoff
 /tools/license-check/ @bfops @jdetter @cloutiertyler
 /.github/ @bfops @jdetter @cloutiertyler
+/.github/workflows/release.yml @bfops @jdetter @cloutiertyler @rekhoff
 
 /crates/sdk/examples/quickstart-chat/ @gefjon
 /modules/quickstart-chat/ @gefjon

.github/actions/keynote-bench-setup/action.yml

@@ -0,0 +1,49 @@
+name: Keynote Bench Setup
+description: Shared setup for the keynote benchmark job
+
+inputs:
+  public_root:
+    description: Path to the public SpacetimeDB checkout in the caller workspace
+    required: false
+    default: .
+  rust_cache_workspaces:
+    description: Workspace paths passed to Swatinem/rust-cache
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - uses: dsherret/rust-toolchain-file@v1
+
+    - name: Set default rust toolchain
+      shell: bash
+      run: rustup default $(rustup show active-toolchain | cut -d' ' -f1)
+
+    - name: Cache Rust dependencies
+      uses: Swatinem/rust-cache@v2
+      with:
+        workspaces: ${{ inputs.rust_cache_workspaces }}
+        shared-key: spacetimedb
+        save-if: false
+        prefix-key: v1
+
+    - name: Check v8 outputs
+      shell: bash
+      run: |
+        find "${CARGO_TARGET_DIR}"/ -type f | grep '[/_]v8' || true
+        if ! [ -f "${CARGO_TARGET_DIR}"/release/gn_out/obj/librusty_v8.a ]; then
+          echo "Could not find v8 output file librusty_v8.a; rebuilding manually."
+          cargo clean --release -p v8 || true
+          cargo build --release -p v8
+        fi
+      working-directory: ${{ inputs.public_root }}
+
+    - name: Build public keynote benchmark binaries
+      shell: bash
+      run: cargo build --release -p spacetimedb-cli -p spacetimedb-standalone
+      working-directory: ${{ inputs.public_root }}
+
+    - name: Build TypeScript SDK
+      shell: bash
+      run: pnpm build
+      working-directory: ${{ inputs.public_root }}/crates/bindings-typescript

.github/actions/setup-pnpm/action.yml

@@ -1,14 +1,24 @@
 name: Set up pnpm
 description: Install pnpm and configure repository package-age policy before any install
 inputs:
+  package_json_file:
+    description: package.json file used to determine the pnpm version
+    required: false
+    default: package.json
   run_install:
     description: Run pnpm install after configuring pnpm
     required: false
     default: "false"
+  working_directory:
+    description: Directory to run pnpm install in
+    required: false
+    default: .
 runs:
   using: composite
   steps:
     - uses: pnpm/action-setup@v4
+      with:
+        package_json_file: ${{ inputs.package_json_file }}
 
     - name: Configure pnpm package age policy
       shell: bash
@@ -17,4 +27,5 @@ runs:
     - name: Install dependencies
       if: inputs.run_install == 'true'
       shell: bash
+      working-directory: ${{ inputs.working_directory }}
       run: pnpm install

.github/workflows/benchmarks.yml

@@ -132,7 +132,7 @@ jobs:
 
       # this will work for both PR and master
       - name: Upload criterion results to DO spaces
-        uses: shallwefootball/s3-upload-action@master
+        uses: shallwefootball/s3-upload-action@0d261a6f15b3b2e209dfebdecace4b100c04f95b # master
         with:
           aws_key_id: ${{ secrets.AWS_KEY_ID }}
           aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY}}
@@ -308,7 +308,7 @@ jobs:
 
       # this will work for both PR and master
       - name: Upload callgrind results to DO spaces
-        uses: shallwefootball/s3-upload-action@master
+        uses: shallwefootball/s3-upload-action@0d261a6f15b3b2e209dfebdecace4b100c04f95b # master
         with:
           aws_key_id: ${{ secrets.AWS_KEY_ID }}
           aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY}}