feast-dev · ugiordan · Dec 30, 2025 · Dec 31, 2025 · Jan 2, 2026 · Jan 3, 2026
diff --git a/.github/workflows/disconnected-readiness.yml b/.github/workflows/disconnected-readiness.yml
@@ -0,0 +1,12 @@
+name: Disconnected Readiness
+on:
+  pull_request:
+    branches:
+      - main
+      - master
+
+jobs:
+  check:
+    uses: opendatahub-io/disconnected-readiness-scorer/.github/workflows/disconnected-readiness-check.yml@v1
+    with:
+      rules: ""
diff --git a/.github/workflows/sync_stable_branch.yml b/.github/workflows/sync_stable_branch.yml
@@ -0,0 +1,106 @@
+name: Sync to Stable Branch
+
+on:
+  pull_request:
+    types:
+      - closed
+    branches:
+      - master
+
+jobs:
+  cherry-pick-to-stable:
+    permissions:
+      contents: write
+      pull-requests: write
+    if: >-
+      github.event.pull_request.merged == true &&
+      contains(github.event.pull_request.labels.*.name, 'sync-to-stable')
+    runs-on: ubuntu-latest
+
+    env:
+      GH_TOKEN: ${{ secrets.SYNC_STABLE_PAT }}
+      PR_NUMBER: ${{ github.event.pull_request.number }}
+      MERGE_SHA: ${{ github.event.pull_request.merge_commit_sha }}
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.SYNC_STABLE_PAT }}
+
+      - name: Configure Git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Create cherry-pick branch
+        id: cherry-pick
+        run: |
+          BRANCH="auto-sync/stable/${PR_NUMBER}"
+          echo "branch=${BRANCH}" >> "$GITHUB_OUTPUT"
+
+          git checkout -b "$BRANCH" origin/stable
+
+          # -m 1 handles merge commits by picking the first parent
+          if git cherry-pick -m 1 "$MERGE_SHA"; then
+            echo "conflict=false" >> "$GITHUB_OUTPUT"
+          else
+            git cherry-pick --abort || true
+            git commit --allow-empty -m "cherry-pick of #${PR_NUMBER} failed — manual resolution needed"
+            echo "conflict=true" >> "$GITHUB_OUTPUT"
+          fi
+
+          git push origin "$BRANCH" --force
+
+      - name: Create Pull Request
+        id: create-pr
+        env:
+          PR_TITLE: ${{ github.event.pull_request.title }}
+          SOURCE_PR_URL: ${{ github.event.pull_request.html_url }}
+        run: |
+          BRANCH="${{ steps.cherry-pick.outputs.branch }}"
+          CONFLICT="${{ steps.cherry-pick.outputs.conflict }}"
+
+          if [ "$CONFLICT" = "true" ]; then
+            PR_URL=$(gh pr create \
+              --base stable \
+              --head "$BRANCH" \
+              --title "sync(stable): ${PR_TITLE} (#${PR_NUMBER}) [CONFLICT]" \
+              --body "## Auto-sync from master (PR #${PR_NUMBER})
+
+          Cherry-pick of ${SOURCE_PR_URL} **failed due to merge conflicts**.
+
+          ### Manual resolution required
+          \`\`\`bash
+          git fetch origin
+          git checkout -B auto-sync/stable/${PR_NUMBER} origin/stable
+          git cherry-pick -m 1 ${MERGE_SHA}
+          # resolve conflicts, then:
+          git add .
+          git cherry-pick --continue
+          git push origin auto-sync/stable/${PR_NUMBER} --force
+          \`\`\`" \
+              --label "sync-to-stable" \
+              --label "needs-manual-resolution")
+          else
+            PR_URL=$(gh pr create \
+              --base stable \
+              --head "$BRANCH" \
+              --title "sync(stable): ${PR_TITLE} (#${PR_NUMBER})" \
+              --body "## Auto-sync from master (PR #${PR_NUMBER})
+
+          Cherry-pick of ${SOURCE_PR_URL} to \`stable\` branch.
+
+          This PR was automatically created and will auto-merge after CI passes." \
+              --label "sync-to-stable")
+          fi
+
+          echo "pr_url=${PR_URL}" >> "$GITHUB_OUTPUT"
+          echo "Created PR: ${PR_URL}"
+
+      - name: Enable auto-merge
+        if: steps.cherry-pick.outputs.conflict == 'false'
+        run: |
+          PR_URL="${{ steps.create-pr.outputs.pr_url }}"
+          gh pr merge "$PR_URL" --auto --squash
diff --git a/.github/workflows/trigger-konflux-nightly.yaml b/.github/workflows/trigger-konflux-nightly.yaml
@@ -0,0 +1,96 @@
+name: Nightly Test Status Monitor
+
+# The Feast nightly integration test is scheduled and executed entirely within
+# Konflux via the PaC cron trigger in .tekton/feast-nightly-test.yaml (daily
+# at 8 AM UTC). The Konflux pipeline posts the result back to GitHub as a
+# commit status (context: konflux/nightly-feast) on the master HEAD.
+#
+# This workflow runs after the Konflux pipeline should have completed and
+# reports the nightly status in the GitHub Actions summary.
+#
+# No Konflux API secrets are required.
+
+on:
+  schedule:
+    - cron: '0 11 * * *'   # 11 AM UTC — Konflux nightly starts 8 AM, runs ~2h
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: 'Branch to check nightly status for'
+        required: false
+        default: 'master'
+        type: string
+
+env:
+  STATUS_CONTEXT: 'konflux/nightly-feast'
+
+jobs:
+  check-nightly-status:
+    runs-on: ubuntu-latest
+    permissions:
+      statuses: read
+    steps:
+      - name: Get branch HEAD SHA
+        id: sha
+        env:
+          GH_TOKEN: ${{ github.token }}
+          BRANCH: ${{ inputs.branch || 'master' }}
+        run: |
+          SHA=$(gh api "repos/${{ github.repository }}/git/refs/heads/${BRANCH}" \
+            --jq '.object.sha')
+          echo "sha=${SHA}" >> "$GITHUB_OUTPUT"
+          echo "branch=${BRANCH}" >> "$GITHUB_OUTPUT"
+          echo "Branch: ${BRANCH}  SHA: ${SHA}"
+
+      - name: Read Konflux nightly commit status
+        id: nightly
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          # The Konflux nightly pipeline posts commit status via report-nightly-status task.
+          # Statuses are ordered newest-first; pick the first matching context.
+          PAYLOAD=$(gh api \
+            "repos/${{ github.repository }}/commits/${{ steps.sha.outputs.sha }}/statuses" \
+            --jq "[.[] | select(.context == \"${STATUS_CONTEXT}\")] | first // {}")
+
+          STATE=$(echo "$PAYLOAD"       | jq -r '.state       // "not_found"')
+          DESCRIPTION=$(echo "$PAYLOAD" | jq -r '.description // ""')
+          TARGET_URL=$(echo "$PAYLOAD"  | jq -r '.target_url  // ""')
+
+          echo "state=${STATE}"             >> "$GITHUB_OUTPUT"
+          echo "description=${DESCRIPTION}" >> "$GITHUB_OUTPUT"
+          echo "target_url=${TARGET_URL}"   >> "$GITHUB_OUTPUT"
+
+          echo "Konflux nightly status: ${STATE}"
+          echo "Description:            ${DESCRIPTION}"
+          echo "Details URL:            ${TARGET_URL}"
+
+          if [ "${STATE}" = "pending" ]; then
+            echo "::warning::Konflux nightly pipeline is still pending — results not available yet."
+          elif [ "${STATE}" = "not_found" ]; then
+            echo "::warning::No commit status found for context '${STATUS_CONTEXT}' on ${BRANCH} HEAD."
+            echo "::warning::The Konflux pipeline may not have run yet or status was not posted."
+          elif [ "${STATE}" = "failure" ]; then
+            echo "::error::Konflux nightly test failed — see Details URL for pipeline run logs."
+          fi
+
+      - name: Summary
+        if: always()
+        env:
+          STATE: ${{ steps.nightly.outputs.state }}
+          DESCRIPTION: ${{ steps.nightly.outputs.description }}
+          TARGET_URL: ${{ steps.nightly.outputs.target_url }}
+        run: |
+          {
+            echo "## Feast Nightly Test Status"
+            echo ""
+            echo "| | |"
+            echo "|---|---|"
+            echo "| **Branch** | \`${{ steps.sha.outputs.branch }}\` |"
+            echo "| **Commit** | \`${{ steps.sha.outputs.sha }}\` |"
+            echo "| **Konflux status** | \`${STATE}\` |"
+            echo "| **Description** | ${DESCRIPTION} |"
+            if [ -n "${TARGET_URL}" ]; then
+              echo "| **Details** | [View pipeline run](${TARGET_URL}) |"
+            fi
+          } >> "$GITHUB_STEP_SUMMARY"
diff --git a/.secrets.baseline b/.secrets.baseline
@@ -1172,7 +1172,7 @@
         "filename": "infra/feast-operator/internal/controller/services/services.go",
         "hashed_secret": "36dc326eb15c7bdd8d91a6b87905bcea20b637d1",
         "is_verified": false,
-        "line_number": 180
+        "line_number": 185
       }
     ],
     "infra/feast-operator/internal/controller/services/tls_test.go": [