From 3999148ea0496f10012413e0266dfbfc75878ea5 Mon Sep 17 00:00:00 2001 From: CloudQuery Bot <102256036+cq-bot@users.noreply.github.com> Date: Wed, 25 Mar 2026 14:14:39 +0000 Subject: [PATCH 01/10] fix(deps): Pin dependencies (#236) --- .github/workflows/ci.yml | 4 ++-- .github/workflows/pr_title.yml | 2 +- .github/workflows/publish.yml | 4 ++-- .github/workflows/regen.yml | 6 +++--- .github/workflows/release_pr.yml | 2 +- 5 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0f1b869..0d61464 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -16,8 +16,8 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v6 - - uses: actions/setup-java@v5 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5 with: distribution: "temurin" java-version: "18" diff --git a/.github/workflows/pr_title.yml b/.github/workflows/pr_title.yml index fb72636..57c7eed 100644 --- a/.github/workflows/pr_title.yml +++ b/.github/workflows/pr_title.yml @@ -17,7 +17,7 @@ jobs: steps: # Please look up the latest version from # https://github.com/amannn/action-semantic-pull-request/releases - - uses: amannn/action-semantic-pull-request@v6 + - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 6a26a38..2175e77 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -13,8 +13,8 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v6 - - uses: actions/setup-java@v5 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5 with: distribution: "temurin" java-version: "18" diff --git a/.github/workflows/regen.yml b/.github/workflows/regen.yml index bf7fdb2..e39cf95 100644 --- a/.github/workflows/regen.yml +++ b/.github/workflows/regen.yml @@ -13,8 +13,8 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v6 - - uses: actions/setup-java@v5 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5 with: distribution: "temurin" java-version: "18" @@ -26,7 +26,7 @@ jobs: make clone-proto make gen-proto - name: Create Pull Request - uses: peter-evans/create-pull-request@v8 + uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8 with: # required so the PR triggers workflow runs token: ${{ secrets.GH_CQ_BOT }} diff --git a/.github/workflows/release_pr.yml b/.github/workflows/release_pr.yml index 5cbe3ae..2df9788 100644 --- a/.github/workflows/release_pr.yml +++ b/.github/workflows/release_pr.yml @@ -11,7 +11,7 @@ jobs: release-please: runs-on: ubuntu-latest steps: - - uses: google-github-actions/release-please-action@v4 + - uses: google-github-actions/release-please-action@e4dc86ba9405554aeba3c6bb2d169500e7d3b4ee # v4 id: release with: token: ${{ secrets.GH_CQ_BOT }} From 58d115ffd0b00e78c32fa578c473ad1de0f6a894 Mon Sep 17 00:00:00 2001 From: Erez Rokah Date: Wed, 25 Mar 2026 16:28:17 +0000 Subject: [PATCH 02/10] chore: Replace pull_request_target with pull_request in PR title validation (#237) Replace `pull_request_target` with `pull_request` to reduce attack surface. The semantic PR title action only reads the event payload, so elevated permissions are not needed. --- .github/workflows/pr_title.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pr_title.yml b/.github/workflows/pr_title.yml index 57c7eed..d052afd 100644 --- a/.github/workflows/pr_title.yml +++ b/.github/workflows/pr_title.yml @@ -1,7 +1,7 @@ name: "Validate PR title" on: - pull_request_target: + pull_request: types: - opened - edited From 76d8e44bc24a61b0d794fed6b9c94783f0fa4157 Mon Sep 17 00:00:00 2001 From: Erez Rokah Date: Fri, 27 Mar 2026 12:31:25 +0000 Subject: [PATCH 03/10] chore(ci): Replace GH_CQ_BOT PAT with GitHub App tokens (#239) Replace GH_CQ_BOT PAT with short-lived tokens from the cloudquery-ci GitHub App. --- .github/.kodiak.toml | 2 +- .github/workflows/regen.yml | 11 +++++++++-- .github/workflows/release_pr.yml | 10 +++++++++- 3 files changed, 19 insertions(+), 4 deletions(-) diff --git a/.github/.kodiak.toml b/.github/.kodiak.toml index a963117..f642dba 100644 --- a/.github/.kodiak.toml +++ b/.github/.kodiak.toml @@ -1,7 +1,7 @@ version = 1 [approve] -auto_approve_usernames = ["cq-bot"] +auto_approve_usernames = ["cloudquery-ci"] [merge.message] body = "pull_request_body" diff --git a/.github/workflows/regen.yml b/.github/workflows/regen.yml index e39cf95..c573b9a 100644 --- a/.github/workflows/regen.yml +++ b/.github/workflows/regen.yml @@ -12,6 +12,14 @@ jobs: timeout-minutes: 30 runs-on: ubuntu-latest steps: + - name: Generate GitHub App token + id: app-token + uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3 + with: + app-id: ${{ secrets.CQ_APP_ID }} + private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} + permission-contents: write + permission-pull-requests: write - name: Checkout uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5 @@ -29,11 +37,10 @@ jobs: uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8 with: # required so the PR triggers workflow runs - token: ${{ secrets.GH_CQ_BOT }} + token: ${{ steps.app-token.outputs.token }} branch: fix/gen_proto base: main title: "fix: Generate Java Code from `plugin-pb`" commit-message: "fix: Generate Java Code from `plugin-pb`" body: This PR was created by a scheduled workflow to regenerate the Java code from `plugin-pb`. - author: cq-bot labels: automerge diff --git a/.github/workflows/release_pr.yml b/.github/workflows/release_pr.yml index 2df9788..67f8b08 100644 --- a/.github/workflows/release_pr.yml +++ b/.github/workflows/release_pr.yml @@ -11,7 +11,15 @@ jobs: release-please: runs-on: ubuntu-latest steps: + - name: Generate GitHub App token + id: app-token + uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3 + with: + app-id: ${{ secrets.CQ_APP_ID }} + private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} + permission-contents: write + permission-pull-requests: write - uses: google-github-actions/release-please-action@e4dc86ba9405554aeba3c6bb2d169500e7d3b4ee # v4 id: release with: - token: ${{ secrets.GH_CQ_BOT }} + token: ${{ steps.app-token.outputs.token }} From 7e2baa1b92bf6efc315a1813ace36c23c278ef71 Mon Sep 17 00:00:00 2001 From: "cloudquery-ci[bot]" <271027272+cloudquery-ci[bot]@users.noreply.github.com> Date: Wed, 1 Apr 2026 00:55:45 +0000 Subject: [PATCH 04/10] chore(deps): Update gradle/actions digest to 263d8fe (#242) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | gradle/actions | action | digest | `0723195` → `263d8fe` | --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- .github/workflows/ci.yml | 2 +- .github/workflows/publish.yml | 4 ++-- .github/workflows/regen.yml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0d61464..079f1d4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -23,6 +23,6 @@ jobs: java-version: "18" cache: "gradle" - name: Validate Gradle wrapper - uses: gradle/actions/wrapper-validation@0723195856401067f7a2779048b490ace7a47d7c + uses: gradle/actions/wrapper-validation@263d8fe18eb54ae581bcdc2e263c5a49173958a3 - name: Build package run: ./gradlew build diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 2175e77..3f09b1c 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -20,9 +20,9 @@ jobs: java-version: "18" cache: "gradle" - name: Validate Gradle wrapper - uses: gradle/actions/wrapper-validation@0723195856401067f7a2779048b490ace7a47d7c + uses: gradle/actions/wrapper-validation@263d8fe18eb54ae581bcdc2e263c5a49173958a3 - name: Setup Gradle - uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c + uses: gradle/actions/setup-gradle@263d8fe18eb54ae581bcdc2e263c5a49173958a3 - name: Publish Package env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/regen.yml b/.github/workflows/regen.yml index c573b9a..31da71f 100644 --- a/.github/workflows/regen.yml +++ b/.github/workflows/regen.yml @@ -28,7 +28,7 @@ jobs: java-version: "18" cache: "gradle" - name: Validate Gradle wrapper - uses: gradle/actions/wrapper-validation@0723195856401067f7a2779048b490ace7a47d7c + uses: gradle/actions/wrapper-validation@263d8fe18eb54ae581bcdc2e263c5a49173958a3 - name: Generate code run: | make clone-proto From 7eb1d172e70542f946ef92b633aafd755ac3f68a Mon Sep 17 00:00:00 2001 From: "cloudquery-ci[bot]" <271027272+cloudquery-ci[bot]@users.noreply.github.com> Date: Wed, 1 Apr 2026 01:04:06 +0000 Subject: [PATCH 05/10] fix(deps): Update dependency org.mockito:mockito-core to v5.23.0 (#243) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [org.mockito:mockito-core](https://redirect.github.com/mockito/mockito) | `5.21.0` → `5.23.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.mockito:mockito-core/5.23.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.mockito:mockito-core/5.21.0/5.23.0?slim=true) | --- ### Release Notes
mockito/mockito (org.mockito:mockito-core) ### [`v5.23.0`](https://redirect.github.com/mockito/mockito/releases/tag/v5.23.0) #### NOTE: Breaking change for Android The `mockito-android` artifact has a breaking change: tests now require a device or emulator based on API 28+ (Android P). This is to enable new support for mocking Kotlin classes. See [#​3788](https://redirect.github.com/mockito/mockito/issues/3788) for more details. *** *Changelog generated by [Shipkit Changelog Gradle Plugin](https://redirect.github.com/shipkit/shipkit-changelog)* ##### 5.23.0 - 2026-03-11 - [6 commit(s)](https://redirect.github.com/mockito/mockito/compare/v5.22.0...v5.23.0) by Brice Dutheil, Joshua Selbo, Philippe Kernevez - Replace mockito-android mock maker implementation with dexmaker-mockito-inline [(#​3792)](https://redirect.github.com/mockito/mockito/pull/3792) - Fix StackOverflowError with AbstractList after using mockSingleton [(#​3790)](https://redirect.github.com/mockito/mockito/pull/3790) - Mark parameters of `Mockito.when` `@Nullable` [(#​3503)](https://redirect.github.com/mockito/mockito/issues/3503) ### [`v5.22.0`](https://redirect.github.com/mockito/mockito/releases/tag/v5.22.0) *Changelog generated by [Shipkit Changelog Gradle Plugin](https://redirect.github.com/shipkit/shipkit-changelog)* ##### 5.22.0 - 2026-02-27 - [6 commit(s)](https://redirect.github.com/mockito/mockito/compare/v5.21.0...v5.22.0) by Joshua Selbo, NiMv1, Rafael Winterhalter, dependabot\[bot], eunbin son - Avoid mocking of internal static utilities [(#​3785)](https://redirect.github.com/mockito/mockito/pull/3785) - Bump graalvm/setup-graalvm from 1.4.4 to 1.4.5 [(#​3780)](https://redirect.github.com/mockito/mockito/pull/3780) - Static mocking of UUID.class corrupted under JDK 25 [(#​3778)](https://redirect.github.com/mockito/mockito/issues/3778) - Bump actions/upload-artifact from 5 to 6 [(#​3774)](https://redirect.github.com/mockito/mockito/pull/3774) - docs: clarify RETURNS\_MOCKS behavior with sealed abstract enums (Java 15+) [(#​3773)](https://redirect.github.com/mockito/mockito/pull/3773) - Add tests for Sets utility class [(#​3771)](https://redirect.github.com/mockito/mockito/pull/3771) - Add core API to enable Kotlin singleton mocking [(#​3762)](https://redirect.github.com/mockito/mockito/pull/3762) - Stubbing Kotlin `object` singletons [(#​3652)](https://redirect.github.com/mockito/mockito/issues/3652) - Incorrect documentation for RETURNS\_MOCKS [(#​3285)](https://redirect.github.com/mockito/mockito/issues/3285)
--- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 1ba8dd4..506db28 100644 --- a/build.gradle +++ b/build.gradle @@ -44,7 +44,7 @@ dependencies { testImplementation "io.grpc:grpc-testing:${grpcVersion}" testImplementation "junit:junit:4.13.2" - testImplementation "org.mockito:mockito-core:5.21.0" + testImplementation "org.mockito:mockito-core:5.23.0" } protobuf { From aac15491aa1cc443d1c1694d0c5d9d72b6ff685c Mon Sep 17 00:00:00 2001 From: "cloudquery-ci[bot]" <271027272+cloudquery-ci[bot]@users.noreply.github.com> Date: Wed, 1 Apr 2026 01:05:11 +0000 Subject: [PATCH 06/10] fix(deps): Update Gradle to v9.4.1 (#244) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [gradle](https://gradle.org) ([source](https://redirect.github.com/gradle/gradle)) | minor | `9.3.1` → `9.4.1` | --- ### Release Notes
gradle/gradle (gradle) ### [`v9.4.1`](https://redirect.github.com/gradle/gradle/releases/tag/v9.4.1): 9.4.1 [Compare Source](https://redirect.github.com/gradle/gradle/compare/v9.4.0...v9.4.1) The Gradle team is excited to announce Gradle 9.4.1. Here are the highlights of this release: - Java 26 support - Non-class-based JVM tests - Enhanced console progress bar [Read the Release Notes](https://docs.gradle.org/9.4.1/release-notes.html) We would like to thank the following community members for their contributions to this release of Gradle: [akankshaa-00](https://redirect.github.com/akankshaa-00), [Attila Kelemen](https://redirect.github.com/kelemen), [Björn Kautler](https://redirect.github.com/Vampire), [dblood](https://redirect.github.com/dblood), [Dennis Rieks](https://redirect.github.com/drieks), [duvvuvenkataramana](https://redirect.github.com/duvvuvenkataramana), [John Burns](https://redirect.github.com/wakingrufus), [Julian](https://redirect.github.com/Julianw03), [kevinstembridge](https://redirect.github.com/kevinstembridge), [Niels Doucet](https://redirect.github.com/NielsDoucet), [Philip Wedemann](https://redirect.github.com/hfhbd), [ploober](https://redirect.github.com/ploober), [Richard Hernandez](https://redirect.github.com/rhernandez35), [Roberto Perez Alcolea](https://redirect.github.com/rpalcolea), [Sebastian Lövdahl](https://redirect.github.com/slovdahl), [stephan2405](https://redirect.github.com/stephan2405), [Stephane Landelle](https://redirect.github.com/slandelle), [Ujwal Suresh Vanjare](https://redirect.github.com/usv240), [Victor Merkulov](https://redirect.github.com/urdak), [Vincent Potuček](https://redirect.github.com/Pankraz76), [Vladimir Sitnikov](https://redirect.github.com/vlsi). #### Upgrade instructions Switch your build to use Gradle 9.4.1 by updating your wrapper: ``` ./gradlew wrapper --gradle-version=9.4.1 && ./gradlew wrapper ``` See the Gradle [9.x upgrade guide](https://docs.gradle.org/9.4.1/userguide/upgrading_version_9.html) to learn about deprecations, breaking changes and other considerations when upgrading. For Java, Groovy, Kotlin and Android compatibility, see the [full compatibility notes](https://docs.gradle.org/9.4.1/userguide/compatibility.html). #### Reporting problems If you find a problem with this release, please file a bug on [GitHub Issues](https://redirect.github.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). We hope you will build happiness with Gradle, and we look forward to your feedback via [Twitter](https://twitter.com/gradle) or on [GitHub](https://redirect.github.com/gradle). ### [`v9.4.0`](https://redirect.github.com/gradle/gradle/releases/tag/v9.4.0): 9.4.0 [Compare Source](https://redirect.github.com/gradle/gradle/compare/v9.3.1...v9.4.0) The Gradle team is excited to announce Gradle 9.4.0. Here are the highlights of this release: - Java 26 support - Non-class-based JVM tests - Enhanced console progress bar [Read the Release Notes](https://docs.gradle.org/9.4.0/release-notes.html) We would like to thank the following community members for their contributions to this release of Gradle: [akankshaa-00](https://redirect.github.com/akankshaa-00), [Attila Kelemen](https://redirect.github.com/kelemen), [Björn Kautler](https://redirect.github.com/Vampire), [dblood](https://redirect.github.com/dblood), [Dennis Rieks](https://redirect.github.com/drieks), [duvvuvenkataramana](https://redirect.github.com/duvvuvenkataramana), [John Burns](https://redirect.github.com/wakingrufus), [Julian](https://redirect.github.com/Julianw03), [kevinstembridge](https://redirect.github.com/kevinstembridge), [Niels Doucet](https://redirect.github.com/NielsDoucet), [Philip Wedemann](https://redirect.github.com/hfhbd), [ploober](https://redirect.github.com/ploober), [Richard Hernandez](https://redirect.github.com/rhernandez35), [Roberto Perez Alcolea](https://redirect.github.com/rpalcolea), [Sebastian Lövdahl](https://redirect.github.com/slovdahl), [stephan2405](https://redirect.github.com/stephan2405), [Stephane Landelle](https://redirect.github.com/slandelle), [Ujwal Suresh Vanjare](https://redirect.github.com/usv240), [Victor Merkulov](https://redirect.github.com/urdak), [Vincent Potuček](https://redirect.github.com/Pankraz76), [Vladimir Sitnikov](https://redirect.github.com/vlsi). #### Upgrade instructions Switch your build to use Gradle 9.4.0 by updating your wrapper: ``` ./gradlew wrapper --gradle-version=9.4.0 && ./gradlew wrapper ``` See the Gradle [9.x upgrade guide](https://docs.gradle.org/9.4.0/userguide/upgrading_version_9.html) to learn about deprecations, breaking changes and other considerations when upgrading. For Java, Groovy, Kotlin and Android compatibility, see the [full compatibility notes](https://docs.gradle.org/9.4.0/userguide/compatibility.html). #### Reporting problems If you find a problem with this release, please file a bug on [GitHub Issues](https://redirect.github.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). We hope you will build happiness with Gradle, and we look forward to your feedback via [Twitter](https://twitter.com/gradle) or on [GitHub](https://redirect.github.com/gradle).
--- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- gradle/wrapper/gradle-wrapper.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties index 37f78a6..c61a118 100644 --- a/gradle/wrapper/gradle-wrapper.properties +++ b/gradle/wrapper/gradle-wrapper.properties @@ -1,6 +1,6 @@ distributionBase=GRADLE_USER_HOME distributionPath=wrapper/dists -distributionUrl=https\://services.gradle.org/distributions/gradle-9.3.1-bin.zip +distributionUrl=https\://services.gradle.org/distributions/gradle-9.4.1-bin.zip networkTimeout=10000 validateDistributionUrl=true zipStoreBase=GRADLE_USER_HOME From 46232a1a6462356f0c8ed8f3d180a712851efe8d Mon Sep 17 00:00:00 2001 From: "cloudquery-ci[bot]" <271027272+cloudquery-ci[bot]@users.noreply.github.com> Date: Wed, 1 Apr 2026 01:06:22 +0000 Subject: [PATCH 07/10] fix(deps): Update grpc-java monorepo to v1.80.0 (#245) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [io.grpc:protoc-gen-grpc-java](https://redirect.github.com/grpc/grpc-java) | `1.79.0` → `1.80.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/io.grpc:protoc-gen-grpc-java/1.80.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/io.grpc:protoc-gen-grpc-java/1.79.0/1.80.0?slim=true) | | [io.grpc:grpc-testing](https://redirect.github.com/grpc/grpc-java) | `1.79.0` → `1.80.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/io.grpc:grpc-testing/1.80.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/io.grpc:grpc-testing/1.79.0/1.80.0?slim=true) | | [io.grpc:grpc-netty-shaded](https://redirect.github.com/grpc/grpc-java) | `1.79.0` → `1.80.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/io.grpc:grpc-netty-shaded/1.80.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/io.grpc:grpc-netty-shaded/1.79.0/1.80.0?slim=true) | | [io.grpc:grpc-stub](https://redirect.github.com/grpc/grpc-java) | `1.79.0` → `1.80.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/io.grpc:grpc-stub/1.80.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/io.grpc:grpc-stub/1.79.0/1.80.0?slim=true) | | [io.grpc:grpc-services](https://redirect.github.com/grpc/grpc-java) | `1.79.0` → `1.80.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/io.grpc:grpc-services/1.80.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/io.grpc:grpc-services/1.79.0/1.80.0?slim=true) | | [io.grpc:grpc-protobuf](https://redirect.github.com/grpc/grpc-java) | `1.79.0` → `1.80.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/io.grpc:grpc-protobuf/1.80.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/io.grpc:grpc-protobuf/1.79.0/1.80.0?slim=true) | --- ### Release Notes
grpc/grpc-java (io.grpc:protoc-gen-grpc-java) ### [`v1.80.0`](https://redirect.github.com/grpc/grpc-java/releases/tag/v1.80.0) **API Changes** - core: Added PickResult.copyWithSubchannel() and PickResult.copyWithStreamTracerFactory() to simplify updating PickResult while preserving metadata. Load balancing policies should now ensure ForwardingSubchannel decorators are unwrapped before being returned in a pick result. ([#​12658](https://redirect.github.com/grpc/grpc-java/issues/12658)) ([`eae16b2`](https://redirect.github.com/grpc/grpc-java/commit/eae16b251)) **Bug Fixes** - core: Fixed the retry backoff jitter range to \[0.8, 1.2] to align with the gRPC A6 specification. Retries will now occur more consistently around the calculated backoff interval. ([#​12639](https://redirect.github.com/grpc/grpc-java/issues/12639)) ([`024fdd0`](https://redirect.github.com/grpc/grpc-java/commit/024fdd0ea)) core: Fixed a race condition in RetriableStream where inFlightSubStreams counting could become inconsistent during concurrent retry and deadline events. This ensures that client calls (such as blockingUnaryCall) do not hang indefinitely and correctly receive a close signal. ([#​12649](https://redirect.github.com/grpc/grpc-java/issues/12649)) ([`73abb48`](https://redirect.github.com/grpc/grpc-java/commit/73abb4854)) **Improvements** - api: Trigger R8's ServiceLoader optimization to reduce necessary configuration when using R8 Full Mode ([`470219f`](https://redirect.github.com/grpc/grpc-java/commit/470219f9c)). This allows gRPC to avoid reflection, and the need to specify -keeps for various class’s constructors. Upgrade to protobuf 33.4 ([#​12615](https://redirect.github.com/grpc/grpc-java/issues/12615)) ([`50c18f1`](https://redirect.github.com/grpc/grpc-java/commit/50c18f183)) - cronet: Introduced CRONET\_READ\_BUFFER\_SIZE\_KEY to allow customizing the read buffer size per-stream via CallOptions. Increasing the buffer size from the 4KB default can significantly improve performance for large messages by reducing JNI and context-switching overhead. ([`31fdb6c`](https://redirect.github.com/grpc/grpc-java/commit/31fdb6c22)) - api: Moved FlagResetRule to api/testFixtures and updated ManagedChannelRegistry to honor the GRPC\_ENABLE\_RFC3986\_URIS feature flag. This ensures that target parsing is consistent across the library when the new URI parser is enabled. ([#​12608](https://redirect.github.com/grpc/grpc-java/issues/12608)) - api: Updated NameResolverRegistry to natively support io.grpc.Uri. This is a foundational change that allows gRPC's name resolution system to handle URIs parsed with the new RFC 3986-compliant parser, ensuring more robust target handling. ([#​12609](https://redirect.github.com/grpc/grpc-java/issues/12609)) ([`9903488`](https://redirect.github.com/grpc/grpc-java/commit/990348876)) - xds: Removed the GRPC\_EXPERIMENTAL\_XDS\_SNI feature flag. SNI determination via xDS is now always enabled and follows gRFC A101, where SNI is derived from xDS configurations like auto\_host\_sni or UpstreamTlsContext.sni. This ensures that no SNI is sent if not explicitly configured, unless the legacy channel authority fallback is enabled. ([#​12625](https://redirect.github.com/grpc/grpc-java/issues/12625)) ([`ac44e96`](https://redirect.github.com/grpc/grpc-java/commit/ac44e9681)) **New Features** - core: pick\_first shuffling now a weighted shuffle and observes weights from EDS ([`34dd290`](https://redirect.github.com/grpc/grpc-java/commit/34dd29042)). This finishes the [gRFC A113 pick\_first: Weighted Random Shuffling](https://redirect.github.com/grpc/proposal/blob/master/A113-pick-first-weighted-shuffling.md) support - netty: Added RFC 3986 support to the unix: name resolver. This enables proper parsing of Unix domain socket URIs, including correct handling of query and fragment components in both hierarchical (e.g., unix:///path) and opaque (e.g., unix:/path) formats. ([#​12659](https://redirect.github.com/grpc/grpc-java/issues/12659)) **Thanks to** - [@​becomeStar](https://redirect.github.com/becomeStar) - [@​aymanm-google](https://redirect.github.com/aymanm-google) - [@​PetitBaguette](https://redirect.github.com/PetitBaguette) - [@​stagegrowth](https://redirect.github.com/stagegrowth) - [@​wcchoi](https://redirect.github.com/wcchoi) - [@​Gyuhyeok99](https://redirect.github.com/Gyuhyeok99)
--- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 506db28..c3d7e9e 100644 --- a/build.gradle +++ b/build.gradle @@ -27,7 +27,7 @@ java { targetCompatibility = 1.8 } -def grpcVersion = '1.79.0' +def grpcVersion = '1.80.0' def protobufVersion = '4.33.5' def protocVersion = protobufVersion From 2d1a58a223335f45589aa1f782d302178624f004 Mon Sep 17 00:00:00 2001 From: "cloudquery-ci[bot]" <271027272+cloudquery-ci[bot]@users.noreply.github.com> Date: Wed, 1 Apr 2026 03:28:32 +0000 Subject: [PATCH 08/10] fix(deps): Update protobuf monorepo to v4.34.1 (#246) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [com.google.protobuf:protoc](https://developers.google.com/protocol-buffers/) ([source](https://redirect.github.com/protocolbuffers/protobuf)) | `4.33.5` → `4.34.1` | ![age](https://developer.mend.io/api/mc/badges/age/maven/com.google.protobuf:protoc/4.34.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.google.protobuf:protoc/4.33.5/4.34.1?slim=true) | | [com.google.protobuf:protobuf-java-util](https://developers.google.com/protocol-buffers/) ([source](https://redirect.github.com/protocolbuffers/protobuf)) | `4.33.5` → `4.34.1` | ![age](https://developer.mend.io/api/mc/badges/age/maven/com.google.protobuf:protobuf-java-util/4.34.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.google.protobuf:protobuf-java-util/4.33.5/4.34.1?slim=true) | --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index c3d7e9e..1e66636 100644 --- a/build.gradle +++ b/build.gradle @@ -28,7 +28,7 @@ java { } def grpcVersion = '1.80.0' -def protobufVersion = '4.33.5' +def protobufVersion = '4.34.1' def protocVersion = protobufVersion dependencies { From 257d58c087917c4ae60486f7a869945cbd49dc84 Mon Sep 17 00:00:00 2001 From: "cloudquery-ci[bot]" <271027272+cloudquery-ci[bot]@users.noreply.github.com> Date: Wed, 1 Apr 2026 09:14:41 +0100 Subject: [PATCH 09/10] chore(deps): Replace google-github-actions/release-please-action action with googleapis/release-please-action v4 (#241) * chore(deps): Replace google-github-actions/release-please-action action with googleapis/release-please-action v4 * Update release-please-action to a newer version --------- Co-authored-by: cloudquery-ci[bot] <271027272+cloudquery-ci[bot]@users.noreply.github.com> Co-authored-by: Erez Rokah --- .github/workflows/release_pr.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release_pr.yml b/.github/workflows/release_pr.yml index 67f8b08..7e7c172 100644 --- a/.github/workflows/release_pr.yml +++ b/.github/workflows/release_pr.yml @@ -19,7 +19,7 @@ jobs: private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} permission-contents: write permission-pull-requests: write - - uses: google-github-actions/release-please-action@e4dc86ba9405554aeba3c6bb2d169500e7d3b4ee # v4 + - uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4 id: release with: token: ${{ steps.app-token.outputs.token }} From 9fe83f50a06e8f5476e4982a9033722f7c6d675f Mon Sep 17 00:00:00 2001 From: "cloudquery-ci[bot]" <271027272+cloudquery-ci[bot]@users.noreply.github.com> Date: Wed, 1 Apr 2026 09:19:51 +0100 Subject: [PATCH 10/10] chore(main): Release v0.0.44 (#247) Co-authored-by: cloudquery-ci[bot] <271027272+cloudquery-ci[bot]@users.noreply.github.com> Co-authored-by: Erez Rokah --- .release-please-manifest.json | 2 +- CHANGELOG.md | 10 ++++++++++ build.gradle | 2 +- 3 files changed, 12 insertions(+), 2 deletions(-) diff --git a/.release-please-manifest.json b/.release-please-manifest.json index d7a636b..23eee9e 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,3 +1,3 @@ { - ".": "0.0.43" + ".": "0.0.44" } diff --git a/CHANGELOG.md b/CHANGELOG.md index a2f0a86..eeb25c8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,15 @@ # Changelog +## [0.0.44](https://github.com/cloudquery/plugin-pb-java/compare/v0.0.43...v0.0.44) (2026-04-01) + + +### Bug Fixes + +* **deps:** Update dependency org.mockito:mockito-core to v5.23.0 ([#243](https://github.com/cloudquery/plugin-pb-java/issues/243)) ([7eb1d17](https://github.com/cloudquery/plugin-pb-java/commit/7eb1d172e70542f946ef92b633aafd755ac3f68a)) +* **deps:** Update Gradle to v9.4.1 ([#244](https://github.com/cloudquery/plugin-pb-java/issues/244)) ([aac1549](https://github.com/cloudquery/plugin-pb-java/commit/aac15491aa1cc443d1c1694d0c5d9d72b6ff685c)) +* **deps:** Update grpc-java monorepo to v1.80.0 ([#245](https://github.com/cloudquery/plugin-pb-java/issues/245)) ([46232a1](https://github.com/cloudquery/plugin-pb-java/commit/46232a1a6462356f0c8ed8f3d180a712851efe8d)) +* **deps:** Update protobuf monorepo to v4.34.1 ([#246](https://github.com/cloudquery/plugin-pb-java/issues/246)) ([2d1a58a](https://github.com/cloudquery/plugin-pb-java/commit/2d1a58a223335f45589aa1f782d302178624f004)) + ## [0.0.43](https://github.com/cloudquery/plugin-pb-java/compare/v0.0.42...v0.0.43) (2026-03-01) diff --git a/build.gradle b/build.gradle index 1e66636..56b2678 100644 --- a/build.gradle +++ b/build.gradle @@ -12,7 +12,7 @@ application { group 'io.cloudquery' // x-release-please-start-version -version = '0.0.43' +version = '0.0.44' // x-release-please-end repositories {