Sync with base repo

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,10 @@
+## What changes are proposed in this pull request?
+
+<!--
+**Uncomment** this section if there are any changes affecting public APIs. Else, **delete** this section.
+### This PR affects the following public APIs
+If there are breaking changes, please ensure the `breaking-changes` label gets added by CI, and describe why the changes are needed.
+Note that _new_ public APIs are not considered breaking.
+-->
+
+## How was this change tested?

.github/actions/install-and-cache/action.yml

@@ -0,0 +1,101 @@
+# This is copied from https://github.com/tecolicom/actions-install-and-cache
+# which is Copyright 2022 Office TECOLI, LLC
+
+name: install-and-cache generic backend
+description: 'GitHub Action to run installer and cache the result'
+branding:
+  color: orange
+  icon:  type
+
+inputs:
+  run:     { required: true,  type: string }
+  path:    { required: true,  type: string }
+  cache:   { required: false, type: string, default: yes }
+  key:     { required: false, type: string }
+  sudo:    { required: false, type: string }
+  verbose: { required: false, type: string, default: false }
+
+outputs:
+  cache-hit:
+    value: ${{ steps.cache.outputs.cache-hit }}
+
+runs:
+  using: composite
+  steps:
+
+    - id: setup
+      shell: bash
+      run: |
+        : setup install-and-cache
+        define() { IFS='\n' read -r -d '' ${1} || true ; }
+        define script <<'EOS_cad8_c24e_'
+        ${{ inputs.run }}
+        EOS_cad8_c24e_
+        directory="${{ inputs.path }}"
+        given_key="${{ inputs.key }}"
+        archive= key=
+        case "${{ inputs.cache }}" in
+            yes|workflow)
+                cache="${{ inputs.cache }}"
+                uname -mrs
+                hash=$( (uname -mrs ; cat <<< "$script" ; echo $directory) | \
+                        (md5sum||md5) | awk '{print $1}' )
+                key="${hash}${given_key:+-$given_key}"
+                [ "$cache" == 'workflow' ] && \
+                    key+="-${{ github.run_id }}-${{ github.run_attempt }}"
+                archive=$HOME/archive-$hash.tz
+                ;;
+            *)
+                cache=no
+                ;;
+        esac
+        # use "--recursive-unlink" option if GNU tar is found
+        if tar --version | grep GNU > /dev/null
+        then
+            tar="tar --recursive-unlink"
+        elif gtar --version | grep GNU > /dev/null
+        then
+            tar="gtar --recursive-unlink"
+        else
+            tar=tar
+        fi
+        sed 's/^ *//' << END >> $GITHUB_OUTPUT
+            cache=$cache
+            archive=$archive
+            key=$key
+            tar=$tar
+        END
+
+    - id: cache
+      if: steps.setup.outputs.cache != 'no'
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+      with:
+        path: ${{ steps.setup.outputs.archive }}
+        key:  ${{ steps.setup.outputs.key }}
+
+    - id: extract
+      if: steps.setup.outputs.cache != 'no' && steps.cache.outputs.cache-hit == 'true'
+      shell: bash
+      run: |
+        : extract
+        archive="${{ steps.setup.outputs.archive }}"
+        verbose="${{ inputs.verbose }}"
+        tar="${{ steps.setup.outputs.tar }}"
+        ls -l $archive
+        if [ -s $archive ]
+        then
+            opt=-Pxz
+            [[ $verbose == yes || $verbose == true ]] && opt+=v
+            sudo $tar -C / $opt -f $archive
+        else
+            echo "$archive is empty"
+        fi
+
+    - id: install-and-archive
+      if: steps.cache.outputs.cache-hit != 'true'
+      uses: tecolicom/actions-install-and-archive@9d5afb27f9900f2df47fe40de58fbd837032bddf # v1.3
+      with:
+        run:     ${{ inputs.run }}
+        archive: ${{ steps.setup.outputs.archive }}
+        path:    ${{ inputs.path }}
+        sudo:    ${{ inputs.sudo }}

.github/actions/pr-title-validator/action.yml

@@ -0,0 +1,43 @@
+name: 'PR Title Validator'
+description: 'Validates a pull request title against a regex pattern'
+
+inputs:
+  regex:
+    description: 'Regular expression the PR title must match'
+    required: true
+  breaking-change-regex:
+    description: 'Regex to use instead when the breaking-change label is present'
+    required: false
+    default: ''
+  labels:
+    description: 'JSON array of label names on the PR'
+    required: false
+    default: '[]'
+  title:
+    description: 'PR title to validate. Defaults to github.event.pull_request.title.'
+    required: false
+    default: ''
+
+runs:
+  using: composite
+  steps:
+    - name: Validate PR title
+      shell: bash
+      env:
+        PR_TITLE: ${{ inputs.title || github.event.pull_request.title }}
+        INPUT_REGEX: ${{ inputs.regex }}
+        BREAKING_REGEX: ${{ inputs.breaking-change-regex }}
+        LABELS: ${{ inputs.labels }}
+      run: |
+        REGEX="$INPUT_REGEX"
+        if [[ -n "$BREAKING_REGEX" ]] && echo "$LABELS" | jq -e '.[] | select(. == "breaking-change")' > /dev/null 2>&1; then
+          REGEX="$BREAKING_REGEX"
+          echo "breaking-change label detected, using breaking change regex."
+        fi
+
+        if [[ "$PR_TITLE" =~ $REGEX ]]; then
+          echo "PR title matches pattern."
+          exit 0
+        fi
+        echo "::error::PR title \"$PR_TITLE\" does not match pattern: $REGEX"
+        exit 1

.github/actions/use-homebrew-tools/action.yml

@@ -0,0 +1,47 @@
+# This is copied from https://github.com/tecolicom/actions-use-homebrew-tools/
+# which is Copyright 2022 Office TECOLI, LLC
+
+name: install-and-cache homebrew tools
+description: 'GitHub Action to install and cache homebrew tools'
+branding:
+  color: orange
+  icon:  type
+
+inputs:
+  tools:   { required: false, type: string }
+  key:     { required: false, type: string }
+  path:    { required: false, type: string }
+  cache:   { required: false, type: string, default: yes }
+  verbose: { required: false, type: boolean, default: false }
+
+outputs:
+  cache-hit:
+    value: ${{ steps.update.outputs.cache-hit }}
+
+runs:
+  using: composite
+  steps:
+
+    - id: setup
+      shell: bash
+      run: |
+        : setup use-homebrew-tools
+        given_key="${{ inputs.key }}"
+        brew_version="$(brew --version)"
+        echo "$brew_version"
+        version_key="$( echo "$brew_version" | (md5sum||md5) | awk '{print $1}' )"
+        key="${given_key:+$given_key-}${version_key}"
+        sed 's/^ *//' << END >> $GITHUB_OUTPUT
+            command=brew install
+            prefix=$(brew --prefix)
+            key=$key
+        END
+
+    - id: update
+      uses: ./.github/actions/install-and-cache
+      with:
+        run:     ${{ steps.setup.outputs.command }} ${{ inputs.tools }}
+        path:    ${{ steps.setup.outputs.prefix }} ${{ inputs.path }}
+        key:     ${{ steps.setup.outputs.key }}
+        cache:   ${{ inputs.cache }}
+        verbose: ${{ inputs.verbose }}

.github/workflows/auto-assign-pr.yml

@@ -12,4 +12,4 @@ jobs:
   assign-author:
     runs-on: ubuntu-latest
     steps:
-      - uses: toshimaru/auto-author-assign@v2.1.1
+      - uses: toshimaru/auto-author-assign@16f0022cf3d7970c106d8d1105f75a1165edb516 # v2.1.1

.github/workflows/benchmark.yml

@@ -0,0 +1,82 @@
+# issue_comment is used here to trigger on PR comments, as opposed to pull_request_review
+# (review submissions) or pull_request_review_comment (comments on the diff itself)
+# we want to trigger this on comment creation or edit
+on:
+  issue_comment:
+    types: [created, edited]
+name: Benchmarking PR performance
+jobs:
+  run-benchmark:
+    name: Run benchmarks
+    if: >
+      github.event.issue.pull_request &&
+      (github.event.comment.body == '/bench' || startsWith(github.event.comment.body, '/bench '))
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    outputs:
+      pr_number: ${{ steps.pr.outputs.pr_number }}
+    steps:
+      - name: Get PR metadata
+        id: pr
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REPO: ${{ github.repository }}
+          PR_NUMBER: ${{ github.event.issue.number }}
+        run: |
+          PR_DATA=$(gh api "repos/$REPO/pulls/$PR_NUMBER")
+          HEAD_SHA=$(echo "$PR_DATA" | jq -r .head.sha)
+          BASE_REF=$(echo "$PR_DATA" | jq -r .base.ref)
+          [[ "$HEAD_SHA" == *$'\n'* || "$BASE_REF" == *$'\n'* ]] && { echo "Unexpected newline in API response" >&2; exit 1; }
+          [[ "$BASE_REF" =~ ^[a-zA-Z0-9/_.-]+$ ]] || { echo "Invalid BASE_REF: $BASE_REF" >&2; exit 1; }
+          printf 'head_sha=%s\n' "$HEAD_SHA" >> "$GITHUB_OUTPUT"
+          printf 'base_ref=%s\n'  "$BASE_REF"  >> "$GITHUB_OUTPUT"
+          printf 'pr_number=%s\n' "$PR_NUMBER"  >> "$GITHUB_OUTPUT"
+      - name: Install critcmp
+        # Installed before checkout so the PR's .cargo/config.toml cannot
+        # redirect the registry to a malicious source. The runner's
+        # pre-installed Rust is sufficient -- no toolchain setup needed here.
+        # --locked is omitted for cargo install (same exemption as cargo miri
+        # setup); --version pins the top-level crate.
+        run: cargo install critcmp --version 0.1.8
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          ref: ${{ steps.pr.outputs.head_sha }}
+      - uses: actions-rust-lang/setup-rust-toolchain@150fca883cd4034361b621bd4e6a9d34e5143606 # v1.15.4
+        with:
+          cache: false
+      # See build.yml top-level comment for why save-if is restricted to main.
+      - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
+        with:
+          save-if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
+      - name: Run benchmarks
+        # The comment is posted in the post-comment job after this job completes.
+        env:
+          COMMENT:  ${{ github.event.comment.body }}
+          BASE_REF: ${{ steps.pr.outputs.base_ref }}
+          HEAD_SHA: ${{ steps.pr.outputs.head_sha }}
+        run: bash benchmarks/ci/run-benchmarks.sh
+      - name: Upload benchmark comment
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        with:
+          name: bench-comment
+          path: /tmp/bench-comment.md
+
+  post-comment:
+    name: Post benchmark results
+    needs: run-benchmark
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    steps:
+      - name: Download benchmark comment
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        with:
+          name: bench-comment
+          path: /tmp/
+      - name: Post results as PR comment
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PR_NUMBER: ${{ needs.run-benchmark.outputs.pr_number }}
+          REPO: ${{ github.repository }}
+        run: gh pr comment "$PR_NUMBER" --repo "$REPO" --body-file /tmp/bench-comment.md